Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc440a2-5531-3f56-9940-0a78ef8f5ff6.roa
File: 9fc440a2-5531-3f56-9940-0a78ef8f5ff6.roa (raw, json)
Hash identifier: xcdmklY9HKGpfKsbtYx9mTpQosUJP4azby0AO5X5PhA=
Subject key identifier: 80:35:C3:91:23:C5:C7:FB:10:94:7B:53:78:73:5D:2F:08:46:EF:C7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E483B09B9CFEBACA7B280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc440a2-5531-3f56-9940-0a78ef8f5ff6.roa
Signing time: Tue 21 Jan 2025 13:34:34 +0000
ROA not before: Tue 21 Jan 2025 13:34:34 +0000
ROA not after: Mon 21 Apr 2025 12:34:34 +0000
asID: 396584
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:48:3b:09:b9:cf:eb:ac:a7:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:34 2025 GMT
Not After : Apr 21 12:34:34 2025 GMT
Subject: CN=34432466-0e09-4402-a99f-8eb49a992283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:ec:9e:09:82:e9:cc:28:7a:90:c1:52:6e:
29:c1:84:7b:ac:ad:f0:3f:54:34:5b:53:ec:45:b9:
73:7c:48:40:2a:31:63:85:7e:08:c0:51:9c:b8:98:
01:f1:6e:9b:66:3d:bf:77:19:19:2b:02:0a:b5:3b:
6d:af:67:34:ce:43:d5:63:e6:67:4f:9a:a4:e3:db:
69:89:24:e9:aa:27:14:32:ca:80:b3:ab:94:6f:fc:
62:d7:54:a1:f7:a8:ac:bf:3a:8b:c9:32:75:66:39:
2e:6f:e6:0b:2f:d7:65:0e:17:57:01:cf:79:2b:9b:
f4:b3:4e:a2:e9:8f:c3:b4:e9:37:4a:01:d9:02:3e:
7b:2e:dc:75:22:ae:ec:4e:da:a6:ac:87:dd:e2:73:
f2:d5:ee:a3:87:10:8c:4c:f0:9c:04:ca:2c:3f:7b:
c8:3e:c3:f7:9f:da:80:48:43:68:b7:9f:67:57:b8:
09:a1:d5:58:17:62:11:1d:ba:12:ad:c2:40:da:9f:
f9:da:12:22:f5:89:4d:dc:f6:02:c4:2c:65:0e:7b:
45:8a:4e:27:81:f8:6b:98:e4:2d:b9:3c:d2:e6:78:
0c:af:e5:af:2d:10:6e:49:5d:80:d5:86:19:31:49:
8a:ac:28:2c:cf:50:75:a4:3c:79:d3:79:91:eb:44:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:C3:91:23:C5:C7:FB:10:94:7B:53:78:73:5D:2F:08:46:EF:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc440a2-5531-3f56-9940-0a78ef8f5ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:fa:7a:c5:db:08:7b:15:7b:f4:65:f5:60:95:ee:b3:4f:40:
45:fb:b0:ba:90:64:a8:f9:aa:41:29:8b:13:86:b9:b4:8f:af:
36:d2:b6:77:f9:49:af:46:f0:06:a7:87:bd:96:0b:9d:d1:2e:
e6:03:a9:b1:4a:5e:32:5c:37:46:f2:34:d1:13:3e:ac:af:8a:
f3:ae:10:cd:ae:ca:49:a1:d0:4b:6d:93:d0:3d:c3:f0:98:54:
79:de:9c:ba:fc:a8:65:03:4f:0e:61:68:63:e2:36:cf:86:45:
03:0d:f6:c4:77:94:23:f5:54:c0:2b:eb:58:70:56:d9:d8:e6:
a1:ff:16:c4:fb:eb:e9:9b:02:7b:95:62:19:a7:36:a0:70:8f:
95:de:8b:28:98:90:8a:8e:b3:9a:1d:87:07:14:45:36:b6:d1:
98:c8:5a:1f:3e:5c:4e:a7:76:3e:29:13:bc:f0:13:87:e9:6a:
23:cc:52:be:d4:c4:a6:3b:f0:ea:b7:4a:2f:25:5a:34:f2:ba:
68:89:4b:b1:49:1a:76:f6:8a:0f:ef:c2:1e:6b:6f:f5:53:d9:
08:be:19:7d:79:42:74:2c:4a:06:6b:77:b5:a4:37:50:2d:c7:
fe:99:ed:41:d2:97:f3:3e:36:74:e2:e5:85:df:30:f0:71:43:
5c:fa:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:33 2025 by rpki-client