Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa
File: c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa (raw, json)
Hash identifier: O4H8HUmzPusoWqs3Xnl4JbOcgmZKppbkYjtPVE9OgOY=
Subject key identifier: 89:7B:1E:7C:8B:D7:A6:8F:8B:7F:C4:A9:8C:14:7B:2C:B7:F8:E1:EA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D6A9DCD4E255691B50C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 397202
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d6:a9:dc:d4:e2:55:69:1b:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=4b6c6abe-1b49-4cff-ad86-a20550fb0cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:43:08:c1:5b:c7:3f:98:ac:c4:fb:9f:e0:
a2:dc:5e:39:ff:5a:b1:ec:2c:25:2c:6e:33:76:31:
17:fc:23:61:69:80:33:03:5a:27:09:8a:0c:fc:12:
11:d1:53:5e:e8:f8:ae:b2:ad:8c:b6:89:90:cf:77:
11:be:db:b9:f6:ca:b5:0b:9e:4b:7c:24:ac:22:22:
2a:c0:93:5d:5f:8b:76:8a:ab:b3:8b:6b:7d:ae:be:
2e:52:f1:38:87:01:89:80:3a:31:f3:6c:1f:99:df:
12:9b:dc:5e:9f:1c:6e:94:ab:e8:a3:69:fb:44:89:
d0:71:39:ac:69:01:28:cd:dc:03:7d:53:17:44:05:
3b:9c:ea:a5:c9:b9:e3:0e:bb:37:8c:34:91:23:7e:
fc:48:8f:30:c8:ec:2f:08:c6:e3:7a:82:06:f9:a2:
c2:77:02:ae:bc:19:38:e5:45:99:ef:39:73:0a:60:
73:1f:a1:02:01:f3:64:ff:2c:ca:88:67:7f:4c:79:
11:1c:b3:de:b4:45:4c:a6:bd:2e:98:68:e9:26:13:
36:a5:0a:4e:da:56:c8:64:8c:bb:d5:cb:21:f7:10:
d1:9a:e3:23:1e:4b:72:69:03:8c:2b:13:58:60:0d:
e4:84:fa:2e:46:41:2f:18:2d:bf:4f:1d:1a:f0:d0:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:1E:7C:8B:D7:A6:8F:8B:7F:C4:A9:8C:14:7B:2C:B7:F8:E1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:72:ca:5e:7d:5b:66:de:96:98:3a:e8:ba:b8:28:2e:94:c3:
c6:2b:f1:0e:96:36:ce:0c:ff:ba:1f:60:50:3c:e0:6f:90:a3:
eb:41:07:ef:56:c7:af:66:bf:d5:bc:94:65:8c:e0:32:7b:23:
f4:51:73:33:a2:38:9b:dd:7b:18:e4:1b:1e:8f:ad:b5:31:ae:
ff:ea:ac:b9:bf:0c:b5:91:da:39:06:18:74:9d:14:df:90:53:
9c:58:e2:95:6f:03:52:4b:8b:65:75:49:78:80:91:69:70:1f:
37:f3:cb:05:28:a4:58:1c:3f:fe:fc:44:6a:03:1f:66:a6:bf:
af:ed:e1:3d:2c:e7:44:86:03:d0:38:99:ab:b9:7f:65:57:58:
bb:6b:ac:69:db:4c:f8:e7:b2:c2:4e:72:f3:38:58:71:09:fc:
af:cd:6c:35:9c:4a:ca:bb:f6:59:87:6c:5b:92:7d:30:85:bf:
fd:bf:0c:2f:64:ed:94:24:c6:dc:ec:d3:7b:5a:09:5e:4b:e2:
50:1c:7e:6b:67:6e:b5:64:ab:9d:34:09:1c:b0:9f:c2:31:04:
78:ba:da:86:45:f4:e3:bf:5b:a7:e2:75:77:6a:f7:e4:4b:af:
1a:7a:af:19:81:c0:38:f2:67:50:74:47:72:ad:6e:59:7a:45:
be:16:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:50 2025 by rpki-client