Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa
File: a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa (raw, json)
Hash identifier: q9rYaHiqD5q3XL9DclRhM5O966kkiQPDwzhjlFbGaSs=
Subject key identifier: 81:46:AC:CD:DD:2B:96:C5:20:1E:71:57:82:AB:3E:FA:F2:86:71:F6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039812554F61927CD9E2200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 397201
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:81:25:54:f6:19:27:cd:9e:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e7774ba4-9571-4176-bd55-91571ea2aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:e0:c7:9c:76:5c:71:9c:e6:7d:f1:56:6c:
2f:71:58:f9:37:64:89:34:13:40:40:25:95:97:a7:
5c:e1:5c:3c:de:76:0f:42:8a:d4:66:e5:8e:d0:3d:
26:17:b0:66:c6:88:62:46:70:b2:5f:e2:72:fb:da:
40:e6:22:31:de:3a:c6:2b:63:36:1d:2f:05:07:fb:
60:a0:76:09:52:af:b5:99:a2:2a:a4:60:f6:58:f4:
41:f7:07:46:65:b7:6c:7f:f6:7a:20:33:08:1c:fc:
ad:eb:ad:07:b8:2d:99:a9:5e:fe:b4:2f:a9:57:c7:
7f:91:99:ac:f2:89:ed:3c:8e:79:14:aa:7b:f3:54:
16:04:ea:3b:47:72:93:7c:71:54:95:98:ff:17:ad:
82:3e:48:fe:69:72:c4:0b:ee:54:41:08:41:5c:04:
b8:56:8e:b1:99:d0:65:77:ea:6f:c8:77:4b:36:72:
b5:d4:11:87:67:4f:bc:bf:34:42:2d:86:38:fa:fc:
24:0f:ba:67:c3:82:5a:46:17:39:4b:1b:a3:2a:ce:
f3:ae:82:03:d8:8c:1d:df:68:c4:0a:70:e5:f5:b8:
7e:50:90:0f:3d:c2:6f:50:a6:35:c8:7d:24:1a:bb:
b1:6e:39:9e:59:06:b0:f3:c5:72:0f:50:11:6a:9c:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:AC:CD:DD:2B:96:C5:20:1E:71:57:82:AB:3E:FA:F2:86:71:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ec:90:d1:2b:75:5d:98:be:83:a8:d0:be:9c:30:4b:ff:34:
44:9b:93:96:ce:ed:01:f2:f4:3f:a8:f4:b2:4c:9b:a8:c9:67:
0c:c6:74:06:f5:5c:d5:34:0b:73:55:39:c0:7f:26:1f:bf:3c:
5d:4f:6b:e1:4b:30:f9:b3:59:50:14:5c:e2:65:5b:30:9a:c4:
d6:25:76:a4:6e:06:b7:11:fb:3f:7f:d7:8e:18:36:a7:c5:cc:
4e:92:cc:cd:50:6f:f3:96:94:87:b7:86:3b:53:9b:95:ef:24:
6b:9e:31:73:32:80:47:1b:e5:de:c6:a9:e7:53:7a:67:cc:f8:
c8:ab:f9:e1:03:0c:a4:eb:74:5c:26:2f:e4:c2:1e:d8:93:f0:
d6:fa:36:b2:b8:85:9f:a9:da:a2:f2:b9:3f:94:08:aa:07:c7:
c6:3b:ab:25:ea:9f:20:77:70:0a:bf:31:92:2d:2c:f2:27:06:
5c:ab:13:c2:20:01:d9:b8:fc:e7:4d:9c:6f:87:62:ba:af:1c:
46:c1:8a:24:5e:f4:9a:66:01:34:b0:bb:cc:51:b6:19:ab:b8:
32:8a:22:fc:d5:73:cc:6f:2a:55:e7:56:8a:dc:17:f0:4b:a4:
52:7c:65:93:c0:bb:9d:02:ce:4a:29:c9:03:29:db:e2:9c:ab:
d4:81:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:52 2025 by rpki-client