Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa
File: 0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa (raw, json)
Hash identifier: KzPg/19OIz2YqmP57pUg2UM0CzB6pZ9LhzWRFpjbitw=
Subject key identifier: A5:E5:E5:67:50:49:DB:D6:A1:10:D7:F2:39:9C:D1:D9:F8:84:C3:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB75FE4A9BBFD96A65E9D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396562
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:75:fe:4a:9b:bf:d9:6a:65:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=3ba8f689-2e51-401a-95e6-a858dc5a7c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:37:ce:29:f9:28:af:07:a8:ac:f9:59:21:
ad:5e:3e:af:d6:85:d9:ce:51:88:64:29:74:d0:5e:
df:90:49:1c:69:d1:f8:ed:41:f5:ad:b7:00:76:2c:
c9:10:b0:7a:be:93:3b:7e:69:48:ae:83:6d:20:be:
ab:34:03:df:08:a4:34:e2:de:50:97:1e:f5:38:ac:
36:ba:f8:eb:bb:37:e4:9f:aa:6f:30:ec:9d:b4:f5:
ca:bc:20:6f:9a:42:6c:5d:25:ea:73:4a:45:3d:a1:
52:10:49:ce:e3:8a:5d:68:65:b5:6a:bb:4b:60:f7:
97:65:85:61:d1:f5:1c:41:df:23:bc:17:3e:1e:5d:
eb:e8:13:f0:a9:59:ae:5e:68:ce:af:a0:7e:cd:d9:
ad:03:c5:73:fe:3c:5d:2b:da:46:6c:40:e8:3c:d4:
b9:77:eb:ba:62:c1:10:68:b6:33:a6:db:d1:33:bd:
9e:7e:09:d7:5f:99:df:8f:47:74:6c:50:87:3f:dd:
25:93:0f:7d:be:6d:ff:7e:59:49:0c:d8:35:5a:83:
a4:1b:0f:40:80:7e:db:ad:ed:c1:87:ea:86:46:07:
2c:67:5d:1d:7c:f5:85:f5:8a:5d:81:f5:b3:cd:72:
84:c7:fd:61:49:2b:68:fc:06:bf:e4:c5:69:0a:e4:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:E5:67:50:49:DB:D6:A1:10:D7:F2:39:9C:D1:D9:F8:84:C3:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:1d:ed:4b:76:bf:97:78:47:12:32:bc:18:0a:80:88:b8:76:
a3:6b:76:e6:4a:0b:08:b6:81:e6:98:22:54:13:03:fb:1e:d3:
76:e0:c7:c7:24:40:b1:12:c4:18:15:9f:57:39:3a:f7:5d:25:
a9:43:af:a4:e8:f9:65:0a:c8:97:6e:a7:a7:6b:33:8e:b0:78:
59:97:2b:88:ed:35:b7:53:1d:45:8e:4f:8d:d0:fa:53:f7:56:
79:5c:a6:9c:51:fa:31:39:42:c2:e3:64:14:a5:d5:24:f2:5b:
56:47:4c:95:09:40:f6:45:fe:1d:8e:5e:8d:3c:89:4b:4c:c5:
56:16:16:5a:08:6c:f1:13:53:43:c1:44:ef:d4:6c:14:9c:3d:
31:ef:ca:56:95:bf:51:b9:37:03:3e:7f:83:98:ad:2d:aa:04:
c1:6c:96:ad:89:e8:57:6f:72:52:b3:8d:7e:da:15:14:a7:ef:
9a:b0:df:96:e1:ca:a2:74:f9:a7:10:4a:3d:14:e9:a9:00:de:
a4:70:ae:7b:ca:e8:d7:9a:0d:0f:85:ca:71:5f:a7:81:3f:dd:
0f:b9:0e:ce:73:fb:c1:09:76:cb:dc:c0:55:9c:1e:98:45:b0:
d2:48:4e:78:30:90:6f:81:39:7a:ae:07:ae:ee:9d:15:ed:53:
16:5b:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:38 2025 by rpki-client