Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa
File: 01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa (raw, json)
Hash identifier: S7NEkrH+QktP4Buavl+BVzGkVY03B+PwKSsr67MfYzg=
Subject key identifier: 27:0F:7F:DA:91:7D:E0:D8:BF:48:A8:62:2C:72:BE:F3:31:5B:67:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842431EB616E2EA372DE055C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa
Signing time: Thu 19 Dec 2024 13:45:29 +0000
ROA not before: Thu 19 Dec 2024 13:45:29 +0000
ROA not after: Wed 19 Mar 2025 12:45:29 +0000
asID: 36628
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:1e:b6:16:e2:ea:37:2d:e0:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:29 2024 GMT
Not After : Mar 19 12:45:29 2025 GMT
Subject: CN=d4a8ff5f-5e59-4d38-a781-459dde6fb716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:bc:c6:90:da:48:0b:97:06:51:00:39:7d:
c5:b5:29:74:52:6b:7f:6d:6d:36:f8:17:61:91:5a:
1e:2a:be:60:2c:f7:11:a2:84:42:39:5b:bf:07:d3:
71:d4:7c:02:62:b7:8a:e4:0f:55:b2:51:95:80:a8:
2e:c2:ed:ad:74:9a:6c:de:14:a2:08:19:2c:7d:6a:
ea:b4:2c:a2:f0:3f:71:fd:22:2b:1a:24:57:4f:65:
9a:44:1f:b8:69:38:97:ab:db:60:4c:90:a7:4f:a1:
a6:a1:12:55:c6:53:1f:29:2e:09:d1:30:74:5e:e4:
8a:a1:a8:d3:e8:cf:7c:7f:94:a7:d9:7b:a6:41:a2:
59:18:c9:b7:27:cf:22:90:d3:b5:d0:8e:05:53:b3:
5c:f4:65:cd:80:6c:54:16:9b:e3:b2:03:50:d1:ab:
bb:1e:a0:fb:dc:73:ac:13:c5:2e:83:7c:92:58:50:
fb:c5:c7:8b:bc:19:5a:06:d2:dd:1e:29:88:4b:1b:
84:ae:a0:1b:ce:c9:5d:25:12:8c:c2:e1:01:7a:c6:
e6:3d:f4:05:2d:a9:94:6c:ba:81:e5:e0:94:d5:78:
ca:97:d9:8d:fb:10:7b:88:be:2a:a6:4f:7c:28:9a:
4f:67:50:6d:a9:72:c7:e4:32:21:87:f8:d0:5a:04:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:7F:DA:91:7D:E0:D8:BF:48:A8:62:2C:72:BE:F3:31:5B:67:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:dc:8b:b2:38:57:47:4d:d2:f8:86:51:9e:85:08:fa:2c:02:
f2:f1:f4:d6:24:62:c3:ca:6f:38:02:14:7c:04:b2:38:b4:34:
84:00:c7:28:10:3b:c8:72:e2:f3:87:64:45:1b:83:c3:4e:af:
cf:20:a8:d7:10:57:67:05:26:d2:31:9f:03:d7:04:95:79:c3:
fa:11:cd:73:07:85:48:fb:42:63:af:1d:86:bd:36:12:d4:0d:
a3:13:d1:cd:54:e6:59:12:b7:58:55:4b:f0:b1:c4:68:b8:72:
6b:13:fa:26:98:0a:98:90:78:53:4c:87:8a:73:19:f8:38:8e:
9b:27:f4:c4:1e:ce:61:71:ac:e7:8b:c1:5e:2e:64:aa:6a:2c:
9e:a1:4b:66:d4:d6:80:69:8b:7e:37:1b:05:04:23:3e:81:c0:
aa:c2:00:4c:9f:1c:1d:f1:58:b3:34:e8:b4:cc:67:c2:77:4d:
f9:cd:37:d7:a1:a7:6d:03:d5:4c:7d:9a:f2:09:45:e3:9b:98:
d7:4e:22:65:0a:b0:48:d0:6b:dc:2c:2e:39:2b:ed:3d:a0:27:
77:51:c4:bf:81:d3:be:54:89:84:59:2c:7a:d3:ce:59:a2:f4:
18:6b:54:96:08:90:17:fa:53:00:0a:79:db:80:e0:61:48:94:
25:56:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:46:21 2025 by rpki-client