Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773478e-bd4e-3432-8300-3f4843428f7c.roa
File: d773478e-bd4e-3432-8300-3f4843428f7c.roa (raw, json)
Hash identifier: sBFKlrRCJlcKAtU8G2uy7pL6VBNuxGOzMofqBeuB61I=
Subject key identifier: 50:37:CC:CC:3A:FD:64:0E:BB:25:FC:9A:59:39:2C:BE:AB:E3:2C:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849403985A90BE04B52DFCC17E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773478e-bd4e-3432-8300-3f4843428f7c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396615
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:85:a9:0b:e0:4b:52:df:cc:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=c8a32ba6-780a-48bb-8fc9-89f457f0d861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:9f:d9:6f:9b:f7:23:f8:2f:57:cb:92:de:
23:12:f5:25:f9:9b:d5:cc:82:35:14:2c:32:98:69:
32:e6:b2:f6:a5:7a:e0:11:ad:4d:43:f3:38:0f:05:
90:f2:86:bf:e4:38:16:c8:c2:ff:e3:bb:9e:6b:ff:
b5:29:d4:29:82:1d:d7:98:d5:a5:55:a3:96:05:99:
6b:d9:ec:19:59:f1:79:82:5e:df:52:64:84:d2:ac:
da:27:3d:fc:ba:58:17:3f:06:1a:1c:08:81:f4:be:
3f:54:ea:d9:4e:fc:dd:37:25:9b:fb:93:d7:4c:ac:
b1:68:e4:0a:43:63:b2:9f:d8:f0:47:fc:ab:a3:ee:
39:a3:c1:8d:07:15:a9:24:e0:f2:93:0e:f8:49:44:
b7:dc:8b:c3:44:dd:c1:c6:50:2e:b3:1b:be:12:a8:
6b:39:0d:19:31:b7:a8:17:54:4c:93:3b:c0:71:cd:
57:75:bc:85:be:d5:19:e1:1e:36:9a:5a:b3:61:2e:
0d:d4:6d:36:0f:66:4a:d1:35:52:15:7f:40:53:06:
b9:b9:04:b6:4a:02:d9:24:9c:28:c6:83:56:6d:87:
85:c3:bc:2e:5d:cb:46:2f:36:ef:f9:00:c9:06:65:
9c:29:c9:4d:73:1e:07:75:05:2c:0d:fb:ef:52:c9:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:CC:CC:3A:FD:64:0E:BB:25:FC:9A:59:39:2C:BE:AB:E3:2C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773478e-bd4e-3432-8300-3f4843428f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:5f:58:ae:54:be:87:c8:e4:87:b9:ea:05:b0:2a:33:31:eb:
73:5a:45:ed:43:28:fa:69:f1:10:ab:24:f8:21:20:aa:d0:c1:
cc:3b:12:79:79:bd:96:35:4f:79:7a:00:fe:ab:75:fe:ef:e6:
7e:6f:fb:9f:07:a9:90:18:e3:c8:0a:af:12:c7:5c:72:9f:14:
c6:3e:c3:4f:c4:5e:af:0d:76:ae:01:97:56:53:97:3d:b2:fb:
77:87:54:f2:36:b1:ed:c1:ff:40:2b:b6:a9:47:76:2a:71:17:
48:c0:9a:f0:5d:c0:10:b2:41:7b:99:a2:9b:2c:8a:6a:bb:17:
57:43:3e:7d:67:9a:5e:86:11:e2:a0:c0:c4:6f:8d:b6:7e:09:
bf:d1:f5:68:64:a4:e9:74:7e:00:ac:d1:bf:a9:97:0a:c8:e0:
cc:02:ba:2f:42:a3:72:31:9e:54:4b:c1:e9:d8:c5:a3:b1:36:
b0:45:2a:73:a1:c7:38:72:09:b0:a6:50:88:25:2f:97:c5:d7:
cd:f4:8d:02:6e:a5:88:ee:9a:dd:51:12:2d:64:e2:5a:15:8e:
e8:d5:7d:5c:52:6f:c8:d8:71:50:59:14:7b:57:13:ae:c6:b5:
4e:e8:6c:60:cd:49:22:2e:fc:65:68:ae:e7:44:ea:73:f7:47:
eb:5f:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:13 2025 by rpki-client