Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa
File: 0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa (raw, json)
Hash identifier: xJ1HOY6Ybvg/m/c1SbeSPPzU8wFmBrkfMFslpd/gey8=
Subject key identifier: 03:E2:5E:3E:1B:E9:00:50:25:78:B8:8B:44:6A:77:5A:EA:4E:79:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848610058EE62C86C37A98D5480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 396571
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:58:ee:62:c8:6c:37:a9:8d:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=bf308775-820b-4789-83b0-6a171625ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:cc:2c:ba:32:d9:6d:0f:67:5f:db:10:80:
91:5e:a4:9e:34:e2:b4:27:20:73:26:5a:b8:a1:f5:
3c:4b:e2:c7:81:e0:65:29:ec:55:d1:b3:6f:70:45:
25:0a:43:1f:de:be:cb:64:f1:e2:e6:a0:aa:0f:87:
62:72:c8:1f:dd:05:da:7c:2a:03:29:42:ff:93:e2:
d8:a9:c9:26:cf:08:58:38:7e:02:67:81:d9:f9:73:
cb:bb:54:71:96:3a:3c:0c:54:fb:38:38:e4:49:de:
73:aa:18:c3:02:f7:14:39:36:a4:f8:37:ce:2a:3e:
c0:2d:aa:36:11:35:e9:b4:f8:fe:eb:6f:76:8e:a9:
49:e3:15:33:e2:27:2f:95:5c:48:be:44:a8:92:f2:
16:25:b9:28:61:7f:eb:83:37:5c:a5:d1:99:47:aa:
ba:b6:16:9e:d6:8a:1b:a8:f7:2c:97:88:15:c4:0f:
e8:c8:60:7f:82:ab:45:95:1a:ea:8b:cd:11:3f:09:
61:1c:56:66:bc:1d:f4:1f:ac:f4:7a:1a:1e:9c:31:
72:3f:0e:74:0b:0f:3c:78:7f:30:f7:26:7b:1f:5e:
3e:bc:06:86:4d:aa:17:e9:e5:d4:c7:96:44:d1:c2:
64:72:ea:08:f9:3a:89:e9:f7:95:58:25:b4:98:ac:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:5E:3E:1B:E9:00:50:25:78:B8:8B:44:6A:77:5A:EA:4E:79:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:0c:01:7b:86:63:c3:31:5f:b6:04:5c:2d:0d:19:90:63:3a:
23:0e:55:2e:64:3f:08:42:ef:8e:94:ec:4c:44:7d:70:7f:d8:
c8:0e:ca:19:1a:b3:df:39:83:90:4c:0d:82:d7:a1:6a:0b:b9:
25:f7:3c:d9:54:95:4c:45:4a:72:ac:4f:18:7b:f2:e4:c2:ad:
b9:e5:b7:ad:1e:bf:2b:30:1d:a5:75:db:30:0d:63:66:60:d8:
cb:6e:4e:4f:d4:77:a3:34:9b:ea:37:95:ec:47:c9:f7:04:04:
30:b1:16:3f:e6:e6:68:50:a4:d3:3d:22:ed:93:9a:56:5c:9e:
eb:00:14:3a:5c:61:4a:28:cb:8f:36:0a:dd:8b:e3:d2:b1:70:
e1:32:d5:45:58:b2:83:ba:cc:43:1c:7a:44:47:1a:6e:b9:26:
60:f5:4d:ec:33:34:33:f5:03:ff:23:63:e1:d3:4d:d5:b1:18:
f5:16:cf:bb:1b:16:b0:5a:aa:ea:32:7d:db:36:dd:db:67:9e:
bc:44:fb:b1:41:a4:de:57:fd:e4:3c:44:b6:02:62:19:5b:18:
91:8f:83:81:10:2b:63:8a:22:02:d2:a6:a9:cf:f3:cc:19:c9:
6e:6a:39:b9:3c:3a:5b:fe:d4:76:0c:c3:17:d1:0b:94:c1:12:
aa:33:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:10 2025 by rpki-client