Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ccf97e-af9b-3650-ab1b-63e0e66456be.roa
File: c8ccf97e-af9b-3650-ab1b-63e0e66456be.roa (raw, json)
Hash identifier: 3qGfi4dmYyO+llVCIvMP6dUj59OdFXuE1d/9pzE0rnI=
Subject key identifier: 57:70:3B:76:7E:2B:FC:6C:45:40:07:F2:13:B4:97:9C:79:0C:FA:3A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E464FE55BD90777349680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ccf97e-af9b-3650-ab1b-63e0e66456be.roa
Signing time: Tue 21 Jan 2025 13:34:33 +0000
ROA not before: Tue 21 Jan 2025 13:34:33 +0000
ROA not after: Mon 21 Apr 2025 12:34:33 +0000
asID: 396573
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:46:4f:e5:5b:d9:07:77:34:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:33 2025 GMT
Not After : Apr 21 12:34:33 2025 GMT
Subject: CN=8c2696af-2776-4a97-9032-3feb3c3a949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:ae:c1:77:e5:26:85:f1:ce:4e:7c:3b:06:
e1:62:d6:98:eb:20:ad:28:3c:9b:ca:19:0c:5c:99:
6c:a3:99:c2:c0:9e:42:16:ad:3c:82:ae:fb:93:9d:
8d:dd:a0:5c:80:5f:12:a3:e6:14:61:29:04:a8:05:
b4:84:c6:e0:0c:c5:70:65:34:50:7c:98:1e:ab:89:
2b:27:24:1a:85:85:93:79:2c:91:db:c0:fb:d0:3a:
01:e6:ca:fa:13:87:b2:b0:a5:14:3f:5b:f0:69:6b:
bd:49:dc:c8:28:05:7b:e5:11:89:f7:f5:3e:7e:49:
83:30:c8:66:27:a5:bb:10:57:f7:9f:6c:8c:57:f3:
4f:62:da:d6:d0:9c:0d:13:d9:b6:64:03:c9:c0:a5:
33:48:c0:d1:15:21:d3:58:cb:a6:8b:2a:1e:44:ca:
99:52:f3:be:b2:70:e0:3d:66:2f:2e:b6:45:8d:64:
81:c4:37:0e:83:06:1a:c6:ab:ed:1e:ee:14:c3:81:
52:11:93:67:f3:9c:da:1e:8b:f4:ff:fb:b7:f1:a9:
67:5e:89:26:69:f8:52:ac:c1:f5:d0:df:d1:cc:4e:
99:c0:d8:76:72:55:db:b4:8a:7f:03:fe:31:6a:f7:
12:8b:05:8d:4c:04:f6:59:c9:d2:65:49:e9:7e:73:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:70:3B:76:7E:2B:FC:6C:45:40:07:F2:13:B4:97:9C:79:0C:FA:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ccf97e-af9b-3650-ab1b-63e0e66456be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:0a:5d:4b:1f:33:ff:22:ab:83:9a:67:82:c9:ff:65:4c:94:
d5:79:22:75:ed:59:2b:aa:e5:d7:79:a9:92:8b:94:64:85:23:
6c:8a:89:6f:7c:45:11:5d:b8:63:31:9e:e8:7e:c0:3e:b9:ec:
66:78:f0:de:e8:72:31:55:4e:2a:7a:01:7f:c5:b1:f3:2d:53:
17:cf:4a:35:a3:58:2b:01:7f:c3:d9:2a:08:f3:da:c2:3f:36:
a7:13:fc:f9:86:38:ee:da:dd:f0:e7:21:19:5f:78:16:99:1a:
e4:5b:5c:52:13:f8:1f:d0:58:2c:2a:06:cb:08:85:4c:35:08:
56:d9:91:3d:25:c7:ce:44:12:48:0c:87:5b:ea:67:5d:26:71:
4f:9d:f0:8d:63:2a:3a:d2:76:93:33:97:d0:d8:18:24:ef:fc:
eb:7d:90:f2:15:c1:93:de:cf:dd:77:a1:3a:8b:66:4e:87:8b:
f3:ac:0a:7f:9e:4e:01:fa:b8:b6:d6:cf:f5:e5:4c:a1:cb:75:
99:07:cf:12:ef:8f:c9:f2:a0:05:8f:c6:bd:76:64:ef:a2:41:
c2:7a:c0:4c:31:52:52:5b:5d:34:c8:db:ab:50:67:13:cf:01:
74:f7:a0:56:f2:a3:97:dd:15:66:db:d8:42:d1:35:56:a5:aa:
71:3c:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:17 2025 by rpki-client