Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa
File: f563c169-14af-3bdc-a2ce-727526c05eba.roa (raw, json)
Hash identifier: iDn3K7IyjgDWO3UqIjSR8uzn7m39PF1OiN/0Aqew0Gc=
Subject key identifier: 2A:4A:58:3E:E9:C3:42:E4:9A:E6:63:6A:77:A1:C5:0D:0D:C4:9F:D2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E8F862ABB97D404BF2F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396605
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:8f:86:2a:bb:97:d4:04:bf:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=b9cdcbee-74e1-4989-8e0e-b23a58121d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:b4:f6:d4:41:b1:1d:9a:e2:e1:53:f8:3c:
55:d5:f1:70:92:0e:9a:c9:e9:5c:03:5c:19:8c:da:
2e:df:dd:9e:06:f6:f1:93:28:95:9d:b0:d3:14:fb:
88:eb:ef:bc:44:2f:3d:32:7b:1f:f4:92:77:7b:73:
ff:dd:a5:b4:2d:7f:89:57:42:70:d4:ba:74:5e:57:
3b:e1:ce:13:ef:65:8f:85:88:3e:68:6d:dd:bf:33:
d6:0c:0c:bd:63:b3:81:eb:55:9a:e7:1b:a2:d4:0a:
eb:3f:f3:34:07:ec:eb:a0:b9:03:c4:92:30:25:6c:
62:97:2e:5f:4b:15:ea:44:35:a2:96:d7:78:80:f7:
d6:02:78:2e:4f:a1:39:1c:55:12:f6:6a:04:85:48:
4c:c3:fa:a5:dc:27:39:18:92:75:f3:29:53:93:69:
78:24:80:23:96:be:d4:c1:8d:e9:ac:d7:e3:45:60:
d8:73:72:af:28:7f:bd:21:c9:e8:e1:49:38:0e:59:
4b:0d:e9:ec:7b:7d:13:14:6c:27:f6:14:ad:5e:b2:
b2:5a:c4:0d:34:97:15:5b:99:90:ae:5b:c5:96:d5:
1e:1f:2d:26:cd:06:67:42:6a:3d:bb:b2:b5:4c:55:
fa:ac:81:f8:58:de:3e:dc:3f:4c:2d:23:ec:a8:fe:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:58:3E:E9:C3:42:E4:9A:E6:63:6A:77:A1:C5:0D:0D:C4:9F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:85:94:ca:ba:df:55:03:f7:48:fa:70:49:b5:9a:4f:91:58:
2a:c4:7f:02:33:db:d4:9b:44:eb:a6:2a:00:4a:cc:62:e9:27:
0a:6c:d6:a8:2a:15:e8:34:77:a5:57:c9:d5:da:90:db:b9:42:
1d:dd:75:ad:99:45:9c:ab:f8:fb:3e:41:61:83:3d:ef:f1:01:
7d:7e:b6:94:ac:2b:72:44:93:3f:46:c4:4c:6d:d6:be:30:7c:
0a:63:de:ae:ad:19:a3:00:c5:3a:a3:26:4c:3f:23:41:c5:66:
56:8d:3d:56:c4:98:0d:33:f9:44:3a:e6:7f:5b:15:a4:e9:47:
b7:d2:96:bf:5a:39:de:7b:5b:54:2d:91:06:ea:c5:2d:fb:5e:
44:b7:a3:7c:c9:8d:b4:24:08:70:99:32:34:76:30:92:8f:a1:
78:5c:8f:1b:66:7f:34:50:b9:00:94:83:4b:98:81:d3:e3:58:
a1:1d:f2:22:ba:ee:1f:f1:0f:3e:54:d1:bf:bd:8d:16:64:d2:
71:5b:d3:40:9d:e3:d5:3a:8b:7b:fa:86:1d:78:7c:3a:45:09:
f5:49:7b:56:ef:58:05:9b:4f:59:48:6b:cd:be:e1:83:5e:c4:
65:7d:a4:64:6c:bb:3f:3d:a6:26:cf:4a:82:64:2b:6c:22:73:
92:fd:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:39 2025 by rpki-client