Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0296a68b-5a83-3ddc-a966-b09e70e10e6c.roa
File: 0296a68b-5a83-3ddc-a966-b09e70e10e6c.roa (raw, json)
Hash identifier: eZgvkwVqQ+wpGy8p5clHHa2GOwLKoJ8M4aHheQKZnfM=
Subject key identifier: 53:7A:29:7C:D9:8F:D5:55:DB:8A:A7:D9:37:83:44:A7:B1:CD:8A:EC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433DA5A91DD22D30181D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0296a68b-5a83-3ddc-a966-b09e70e10e6c.roa
Signing time: Thu 19 Dec 2024 13:45:43 +0000
ROA not before: Thu 19 Dec 2024 13:45:43 +0000
ROA not after: Wed 19 Mar 2025 12:45:43 +0000
asID: 396575
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3d:a5:a9:1d:d2:2d:30:18:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:43 2024 GMT
Not After : Mar 19 12:45:43 2025 GMT
Subject: CN=f7ec3e7d-44a3-48a0-ba4a-89b400acc449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:cb:eb:34:1c:89:62:7e:aa:4d:9b:e7:80:
30:0f:47:a3:8f:23:db:ea:e8:45:50:48:55:a3:fd:
bb:7e:4b:3b:e3:4d:8b:3c:95:4b:e3:55:f8:07:d8:
de:e4:16:00:0e:d3:4f:3f:4a:a8:4c:06:d3:d3:16:
53:67:9d:00:b4:35:33:f5:10:98:65:9b:0d:73:b7:
96:6f:73:68:60:80:dc:67:b7:25:53:19:aa:9d:30:
06:d2:ce:be:61:e9:ce:4c:10:6e:e2:04:e4:01:78:
18:09:44:05:c1:50:af:1b:7e:f2:96:be:9c:e6:4b:
72:d1:83:bf:a1:f8:59:41:83:9a:94:39:7e:71:4a:
48:45:be:ca:95:2d:95:b5:ca:9d:10:73:86:9e:ca:
05:09:41:10:1f:e9:81:8e:b4:ef:34:00:31:65:2e:
da:33:f4:bc:c9:82:78:65:0a:4f:cc:e9:f5:e3:56:
fc:f9:2f:ea:93:d6:ba:13:53:25:c9:90:e0:33:95:
2d:31:12:c5:d1:ab:dd:6d:5d:b3:20:56:a8:14:f0:
92:a2:74:80:51:02:b9:2b:36:06:e6:46:40:11:23:
f6:98:9b:e0:bb:a6:02:bb:2f:b2:40:ab:52:89:e9:
8d:09:5a:4e:98:2f:3e:43:3f:8e:1e:ca:85:e4:a9:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:29:7C:D9:8F:D5:55:DB:8A:A7:D9:37:83:44:A7:B1:CD:8A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0296a68b-5a83-3ddc-a966-b09e70e10e6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:12:98:3f:af:62:64:ae:1a:3f:97:5b:eb:c7:25:ff:ed:66:
ee:7a:f4:17:60:1b:79:15:b7:34:38:b9:5b:87:23:e5:a4:20:
44:10:10:9f:1a:76:78:12:0a:25:66:be:b1:8d:d8:ad:64:ca:
2c:a0:1d:9e:a9:3f:c5:16:4f:16:c6:a3:12:58:f7:90:14:5a:
91:02:83:da:8b:84:f5:57:19:90:5d:7c:cb:5c:98:2e:62:f4:
5a:31:c8:9d:91:6e:55:70:ea:e3:37:57:32:6a:78:d6:71:fc:
aa:08:d8:25:b6:06:bf:a4:16:c0:21:d3:44:52:f1:92:92:7c:
78:8f:ba:6d:4f:b5:3a:4e:ac:d8:26:18:c9:80:d9:b8:15:f6:
0b:25:fa:7d:b8:a3:b9:53:25:a9:f6:04:17:17:45:3c:f3:90:
ef:03:6c:ce:72:71:21:7b:85:eb:1d:a9:5f:96:de:c4:92:f1:
21:c6:81:7f:55:c8:7e:52:73:b3:9a:41:ff:34:f5:23:09:2e:
b4:cb:3a:54:eb:6c:61:d0:48:cc:25:d5:0a:95:bb:8b:ae:af:
d5:61:2f:87:b8:4e:49:c1:c5:34:3e:70:fb:50:31:84:a3:0a:
e7:26:1a:78:5e:5b:41:cb:71:0d:23:9b:bc:e1:d0:0c:47:c2:
31:ec:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:22 2025 by rpki-client