Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f720a5b3-df3a-39c5-944b-059a376d6d51.roa
File: f720a5b3-df3a-39c5-944b-059a376d6d51.roa (raw, json)
Hash identifier: R7yOV+1E/zOH3MwqVVGf1LnLD2dLkW3US0WVBJHe2Mg=
Subject key identifier: EB:73:CF:A7:4C:1E:8A:C8:F6:09:17:EC:F2:E0:D9:A5:43:E3:AC:3B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB73CFF063B0EDBDA18AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f720a5b3-df3a-39c5-944b-059a376d6d51.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396557
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:73:cf:f0:63:b0:ed:bd:a1:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=d6e9cd02-4360-4f97-a36f-4b258d1d0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:9f:d7:6c:09:20:3a:5c:b7:e1:ce:09:9b:
a5:4a:92:46:5b:05:b7:84:41:e4:b7:1f:be:41:72:
e0:c0:51:e3:ed:37:9d:89:60:cf:69:d1:3b:1d:1b:
2a:6b:bc:3a:88:12:a4:af:28:3c:b0:04:7c:39:52:
b8:3f:29:f6:d6:21:51:ec:01:4a:a1:14:63:0a:e1:
97:9f:9a:f8:a5:ad:77:fe:43:25:45:11:0e:a6:8c:
92:46:6f:11:49:0d:17:87:63:58:70:b8:2f:4a:e9:
03:41:a2:90:c7:d6:ba:65:dd:c7:de:a9:c0:5f:41:
11:0b:8e:2c:7a:77:75:f2:ff:d9:d1:72:ec:60:e6:
74:02:3f:d9:b1:18:56:41:aa:88:0c:bb:4f:38:11:
ed:75:89:71:ce:17:ff:89:90:13:7b:1a:4d:46:78:
e2:7f:6a:f7:7f:47:77:26:a7:bc:35:0a:52:2a:7e:
4b:06:78:f0:6d:df:e2:81:9b:59:df:60:ee:5e:09:
21:49:a2:89:56:ff:1b:de:ee:8b:52:3e:aa:dc:6a:
71:67:34:19:50:36:a5:e4:da:f4:31:cf:fe:4e:b8:
87:fc:f5:d3:2b:67:03:2d:af:f7:ac:34:6a:67:9e:
5a:24:31:ae:fd:70:35:07:92:fb:43:12:f4:29:34:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:73:CF:A7:4C:1E:8A:C8:F6:09:17:EC:F2:E0:D9:A5:43:E3:AC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f720a5b3-df3a-39c5-944b-059a376d6d51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:f8:f4:52:7e:ee:62:85:8d:e1:52:1c:ce:0b:50:c3:d7:6e:
06:53:d7:ab:e7:dc:c6:22:3e:d5:29:af:ff:c2:99:c3:df:cd:
44:ca:7b:08:bc:8f:56:0b:71:75:12:a4:4e:3e:88:01:a0:6f:
d4:1e:bc:7d:e8:20:9d:bd:d3:de:74:42:1b:43:16:a0:e0:f9:
dc:eb:a2:3d:5f:f1:6c:c2:aa:43:19:8a:59:56:d5:74:2a:81:
9a:ae:13:c7:49:84:ae:1e:27:49:46:96:a6:d1:5e:2a:e8:46:
de:3f:6a:45:c1:bd:f1:a0:b5:e5:a1:47:3c:4b:75:c2:09:a6:
ce:10:32:c5:1e:07:ad:d9:c8:6f:de:76:0a:a5:8e:d9:74:7c:
1f:9a:8e:38:c1:a4:07:b5:5f:a8:b5:49:f3:4e:b9:e4:d7:70:
3f:e2:77:1b:28:54:56:61:00:41:9e:0d:91:70:7e:eb:b4:aa:
5f:06:44:22:e1:51:bb:1d:83:2a:66:61:c3:63:5c:c6:4d:ac:
c7:cf:fe:10:2f:77:ae:f2:19:ab:30:1e:b9:9f:bd:55:f0:fb:
6d:0f:e9:df:eb:a4:86:90:f6:fa:57:5b:c3:bd:54:66:e2:41:
37:54:c4:26:28:9b:d6:8c:5f:f4:dc:52:20:2c:24:1c:8b:86:
35:13:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:07 2025 by rpki-client