Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/181fda0d-afed-3c14-862d-42cb4adbfe42.roa
File: 181fda0d-afed-3c14-862d-42cb4adbfe42.roa (raw, json)
Hash identifier: gqxpQ/eGKYmrVriwXZQgvbflt59eq0a8h7cPVXjiWq0=
Subject key identifier: 76:B3:63:1F:9F:14:39:01:33:75:1E:0D:40:AD:2C:38:0C:4C:43:06
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484515762808CB6531519BDD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/181fda0d-afed-3c14-862d-42cb4adbfe42.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396613
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:76:28:08:cb:65:31:51:9b:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=3e1832d8-33d3-4586-ab1d-6401dd18c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:53:42:49:99:2f:64:fe:af:a4:73:d4:47:
17:03:e8:96:19:8c:9a:d2:2b:56:56:15:66:16:6c:
29:6d:b0:8d:aa:fd:e5:ee:0c:4f:98:4d:93:a6:84:
96:44:82:14:23:03:91:59:db:3c:98:7d:9f:5c:5b:
48:cd:4b:75:9c:85:41:15:b3:1d:0b:1e:ba:93:5d:
7f:29:95:7f:ed:96:0a:b0:fd:6f:1c:73:71:04:52:
1d:fd:da:8e:fe:28:f0:3e:b5:18:6a:8f:86:8f:8c:
a2:6c:57:58:83:5b:37:2a:83:b5:d6:bf:48:07:47:
6b:7d:04:9d:65:72:6b:75:ed:13:b3:05:26:6e:ad:
1a:6c:18:e6:61:71:d0:a4:de:1b:e1:e6:9a:55:0f:
56:c5:2e:52:f0:1b:df:46:76:ad:14:60:26:ee:40:
15:18:7a:70:82:e1:fb:6a:13:1b:9e:cb:5b:67:55:
c7:ed:2b:b3:70:fe:93:79:4a:b1:a1:65:16:5e:8c:
2c:7a:b1:71:c8:cb:06:05:68:e6:da:5f:66:5d:51:
41:cf:81:f8:fb:70:a5:5b:85:f4:a8:93:d5:44:11:
b8:e5:2c:1a:f0:7a:8e:90:59:62:f9:a8:cb:22:9a:
a2:99:49:08:1e:e0:ac:df:91:b9:9e:20:25:bd:2f:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:63:1F:9F:14:39:01:33:75:1E:0D:40:AD:2C:38:0C:4C:43:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/181fda0d-afed-3c14-862d-42cb4adbfe42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:da:c3:0d:0a:38:09:86:76:ad:9d:13:61:06:56:25:f2:8b:
41:c9:8b:46:57:03:11:cd:f3:e0:99:cc:af:61:e3:a5:4e:4f:
be:78:af:c9:05:55:49:6a:43:27:f3:de:b8:f7:4d:a6:a1:24:
05:81:a3:75:97:a3:d7:d7:5d:aa:d0:89:b8:f2:a0:e2:1e:b4:
1b:41:18:35:5d:bf:07:aa:94:dc:7a:f9:45:d9:44:06:3d:35:
40:41:ad:9a:0e:a8:15:fa:70:a5:80:01:38:1c:a7:40:44:55:
46:ae:db:b9:62:d4:5a:88:55:75:13:6f:ba:4e:a9:55:41:16:
76:b0:c0:f3:b1:e7:66:a9:0b:6d:f3:10:76:da:0a:34:ca:2b:
8a:75:b2:17:f0:14:74:34:90:54:ea:f1:3f:ee:7d:96:47:9c:
ae:b1:7f:a3:8f:b0:9c:58:40:74:57:7e:e0:16:01:8d:88:72:
2b:99:94:dc:02:5e:20:3a:37:57:a6:b6:db:d8:de:ad:84:ef:
f6:5d:5a:3f:24:68:f8:32:02:24:e2:98:56:0c:ee:e1:ce:ac:
51:4d:22:3f:b8:bd:b4:19:a2:d2:4b:1a:11:e9:4c:ac:b8:83:
dd:50:1e:11:c1:30:41:9e:28:2b:5f:73:e3:a7:4e:ab:94:38:
e6:c6:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:36 2025 by rpki-client