Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76b2948-f483-3134-a635-cd98067263d3.roa
File: d76b2948-f483-3134-a635-cd98067263d3.roa (raw, json)
Hash identifier: ThU/uweWOcUooJk5DblA2qo1and1Yq/+u/x9YTXGdjI=
Subject key identifier: 62:5E:B6:64:DC:38:01:0C:4E:55:4F:F5:7A:D5:79:73:D5:EF:18:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183EAB39D614EAE310FF640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76b2948-f483-3134-a635-cd98067263d3.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396543
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ea:b3:9d:61:4e:ae:31:0f:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=3a036733-0efe-4b48-9f29-284fa91c877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:73:ea:31:98:8d:f3:2b:c1:a7:9b:e5:1d:
ff:46:11:f3:7f:dd:1b:48:b2:ba:a7:0c:6b:f3:bb:
c2:e3:f6:d7:81:03:a5:84:44:8f:b9:1f:f6:bf:9e:
14:bb:9e:30:ec:df:39:5f:40:05:a6:4e:11:52:f1:
46:6f:b4:77:db:1d:0f:a8:d6:0a:97:b7:d3:a1:f1:
1b:fc:ce:77:47:9b:82:1a:77:f2:ff:c1:f6:ac:3e:
3b:25:89:5a:9a:0a:b3:d6:bc:3d:9c:5c:9d:5e:74:
90:17:8a:80:aa:60:2b:87:a3:25:ec:94:d5:32:df:
b5:91:2e:7b:d9:3e:8e:c5:ce:1f:27:e9:f8:7a:7a:
bf:de:33:89:0d:15:ef:36:77:d0:8f:f7:c7:cb:cb:
7c:2c:b5:73:0c:8c:81:e1:6c:0a:e8:fa:ab:25:5c:
a3:ba:da:8d:3c:df:36:ca:cd:42:2d:f8:df:31:e0:
c8:19:ec:d1:65:22:5a:2e:e2:8e:56:c0:4f:48:f7:
d6:22:6e:cf:85:55:58:b0:5c:11:29:62:c3:27:38:
a0:db:b8:9b:60:25:c5:56:64:21:96:92:49:71:34:
db:b4:62:79:35:8c:be:76:28:ae:e9:d4:fb:10:ab:
a8:d0:0c:af:48:4a:17:25:e5:f8:83:b6:d8:18:ff:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:B6:64:DC:38:01:0C:4E:55:4F:F5:7A:D5:79:73:D5:EF:18:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76b2948-f483-3134-a635-cd98067263d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:13:94:98:53:db:3b:ec:de:b2:9c:c4:48:a9:fe:c2:c2:21:
e4:5b:ba:87:3a:1c:e3:55:05:c1:e4:82:b1:48:da:b0:2b:88:
bf:a6:01:59:fe:53:30:57:ae:a5:eb:22:a4:5d:1a:67:a2:f3:
98:b4:11:10:73:be:cf:16:61:5d:fc:91:78:25:67:c3:56:e2:
b7:78:5b:bf:3a:23:da:d4:9c:13:db:38:02:5c:5a:5c:54:c9:
e9:22:53:94:1e:e1:d6:d4:f6:76:42:f1:21:7e:ef:e1:42:86:
be:d4:67:98:e1:41:9d:67:18:ca:54:5a:ea:db:1e:22:c3:8b:
fe:4d:6c:09:fe:2b:e4:c9:b9:a1:e8:ba:c7:2c:3b:56:80:41:
85:cb:2f:b7:92:1f:99:a8:78:37:41:0b:d8:24:fa:ba:11:b8:
a4:7e:4c:17:d9:8b:02:0b:6a:22:80:ca:5b:47:5b:7f:a9:de:
3f:9e:d7:7f:e4:4f:b6:20:92:2d:f5:c6:d9:66:1f:d0:07:2d:
d3:3c:be:07:33:ff:83:57:b3:ee:b9:3e:88:9f:1a:77:d8:f3:
fb:09:11:14:4e:23:ec:bc:fc:fb:92:5c:24:69:20:0d:7e:1a:
3a:a7:d0:3f:c5:81:ab:be:05:d6:5c:42:4f:f1:85:38:51:16:
32:02:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:30 2025 by rpki-client