Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
File: cbc90a26-c772-3421-9661-4d4303ec6b8f.roa (raw, json)
Hash identifier: te/EtIPTtYdZir7Iy1Xa7jIbZzlkryHMwhA9lpzMyEc=
Subject key identifier: AE:FC:BD:83:7C:6A:9F:18:36:95:FF:C5:75:2B:0C:FF:D0:54:36:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC19A99C7ADB3F1D178F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396616
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:19:a9:9c:7a:db:3f:1d:17:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=8670a163-a581-42d7-916a-2a9fd51dc6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:a6:d5:c0:37:6b:a0:95:e8:c7:ef:b2:0d:
46:3f:44:c1:7a:b4:fe:22:a1:7e:c8:96:2f:f6:77:
8c:53:be:2c:4a:f2:62:11:28:8c:f9:8b:6a:ca:bc:
15:00:bf:b3:a3:ab:bb:f1:b4:09:9e:9a:44:7b:9d:
a6:9f:b5:3f:8b:6a:be:39:af:e0:82:93:2e:cb:0c:
50:6b:81:7c:fe:32:f1:92:04:2c:21:4c:05:e3:4f:
a3:ff:fe:ec:8b:98:64:66:23:e0:cd:33:54:3b:5a:
f8:09:9a:d7:82:0e:71:70:7b:38:ec:98:bc:44:00:
88:af:cc:f5:ce:6b:26:6c:dc:04:72:22:f7:d5:fe:
dc:24:bf:44:b3:f4:d0:44:dd:b3:b8:e8:26:d1:d4:
a4:0d:30:de:1a:47:8b:be:36:5d:95:14:7d:74:5a:
84:2e:4f:2a:fe:92:b2:a0:62:fc:00:90:4e:6d:b5:
6e:71:56:a8:d5:88:01:fd:31:1f:30:f2:f4:7e:3d:
49:29:b1:76:9f:81:2c:99:65:84:16:8d:70:a4:90:
76:2d:0c:3c:a1:60:31:04:19:22:59:7a:eb:19:d3:
e6:b3:ba:cd:c9:9d:ed:80:b3:ae:fa:cf:a7:a7:07:
61:bb:5a:23:1e:b3:de:bf:54:dc:a9:8f:77:6a:88:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:BD:83:7C:6A:9F:18:36:95:FF:C5:75:2B:0C:FF:D0:54:36:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:70:37:bf:0a:fb:35:83:62:92:7e:04:db:5c:05:2a:51:aa:
6b:8e:d4:ec:01:6f:a1:15:25:64:52:31:19:e7:24:b4:84:9e:
e8:c8:5d:69:4d:9c:ca:02:f3:3e:f4:46:d0:9b:db:13:5d:c8:
e6:e7:e1:e1:87:e6:91:1a:76:4c:11:03:27:c9:e2:76:3c:e3:
63:b0:9a:9d:2d:da:06:36:3a:5e:d4:3e:a0:3e:01:d1:8b:72:
65:33:c1:4c:dd:0e:00:d3:c4:67:b1:e8:67:3a:aa:dc:83:a2:
67:39:58:fa:37:65:40:b5:90:23:41:cd:5a:02:68:73:7c:1d:
0b:aa:73:b1:f6:cc:8e:20:2e:22:f7:e7:a0:a1:18:73:da:9f:
1b:2e:9b:54:24:c7:c8:26:25:82:c5:8c:da:6e:b3:14:64:5b:
02:3e:19:47:a6:cb:e8:7e:3c:12:93:b5:85:81:13:fe:17:b4:
58:09:0d:13:8a:6f:fb:cc:72:4b:ee:bf:6c:10:a4:31:ca:0b:
45:bb:f6:ff:25:b5:ca:59:7b:21:b7:61:21:77:7a:b6:d6:cc:
af:be:51:1d:f9:d0:de:1b:67:5c:8d:2c:e7:55:da:ee:af:02:
e1:cd:0b:54:b2:c3:a7:0e:06:9a:0c:3c:4f:56:78:aa:0a:51:
77:bc:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:13 2025 by rpki-client