Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa
File: 089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa (raw, json)
Hash identifier: /dXWI4B29mYXatfUVnAY/FzaovzcGLYI8L5PlF8mV7g=
Subject key identifier: 57:2F:B8:D0:78:1F:F2:FC:FD:A1:17:6F:C4:A9:16:5E:F8:4D:46:52
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B023D7F1801A8E16F0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 397210
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:02:3d:7f:18:01:a8:e1:6f:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=b1e3f646-aadf-4e34-b091-a38d219b53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:d9:86:21:e0:ed:96:26:a6:30:d2:c8:a6:
15:97:e0:60:5f:7d:c6:21:89:94:50:69:fd:ab:e0:
23:9f:04:a7:0f:fa:51:08:cb:06:b3:ac:85:a0:7e:
ce:71:8e:84:d9:20:b6:f4:e8:42:d3:6d:52:15:fd:
89:a6:56:16:a7:7c:ed:b4:1b:6b:69:f9:f4:0d:64:
77:27:12:cd:1e:7a:22:c0:83:64:52:76:c6:ca:84:
7c:c6:89:f5:4e:9b:7d:93:87:28:21:c1:78:71:73:
aa:46:d2:37:3b:58:f0:17:4f:96:69:2e:83:85:8c:
ca:7e:bf:bd:1a:f4:55:0d:39:81:48:d0:10:dd:c2:
a6:eb:7e:f3:5c:b2:6b:10:1f:b7:d6:ca:60:20:a4:
88:9e:54:84:32:7c:e7:ad:cd:55:ae:c3:8a:05:fb:
da:50:93:20:d7:ce:b8:5d:91:3f:bf:7a:28:b1:25:
31:3f:e0:13:7c:ed:ea:15:21:59:48:21:a4:95:ef:
72:b2:5e:f4:72:71:62:6d:d4:84:0a:49:ab:7f:20:
66:2b:41:dc:f1:8e:99:cc:68:a8:95:63:df:a7:58:
cd:ce:d9:d1:11:e6:b6:e6:1d:06:34:f5:fe:6a:13:
ec:21:62:f7:fe:57:8a:98:32:c2:eb:67:c1:c1:ac:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:B8:D0:78:1F:F2:FC:FD:A1:17:6F:C4:A9:16:5E:F8:4D:46:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/089caa2c-e7d2-3bb5-a68f-eb6800fe07e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e1:d5:3a:24:83:d9:24:1c:43:99:3b:0b:70:c5:98:8a:6e:
e2:0f:87:95:d4:b4:8d:b0:2d:a5:a0:e2:a0:c4:6d:44:46:e2:
13:d6:7c:e5:56:b9:c5:29:85:57:b2:8e:de:4b:9c:bb:81:3e:
e1:20:b2:2b:67:7e:45:cd:ed:c5:8a:8b:62:f9:6c:75:9b:b0:
7a:f1:4d:4e:2b:11:22:4b:67:f6:53:5a:1a:ee:62:08:ff:2e:
0f:04:04:9e:3f:dc:38:78:9f:4e:80:b9:21:5e:55:cf:83:f6:
ce:f0:71:d9:b5:9a:a0:dd:bf:0a:24:3f:ad:de:a9:2a:0f:61:
b1:95:1d:1b:96:1d:76:77:22:76:22:e8:b4:07:ff:d3:8c:7a:
29:67:f6:bc:6b:43:ef:e1:a4:37:a0:70:c4:2c:d2:de:df:89:
a5:c9:cb:65:18:9a:b2:fb:58:cc:f2:b6:b3:1d:02:08:d9:da:
f2:6a:e1:04:a2:90:ae:71:52:f1:c4:1f:15:56:67:74:7b:91:
52:a1:51:4c:8c:fa:fa:63:f7:3e:0a:53:3e:8c:42:65:f0:d3:
0f:0f:2c:29:f5:3f:08:f3:04:c1:e5:3a:94:8e:da:95:09:1f:
78:52:1a:8b:6e:e0:53:1f:c7:f1:82:7b:07:f0:ea:5d:01:b2:
75:66:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:00:19 2025 by rpki-client