Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa
File: 224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa (raw, json)
Hash identifier: jQ7zv+yNCAhiOoFZ1EAt1iJmAJsKLr6H/cpCS7HGmFk=
Subject key identifier: 70:1C:31:40:A2:4A:24:4E:01:7C:1F:20:7C:40:F2:34:FD:85:2A:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB70F534E44AB10C5E1380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 397212
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:70:f5:34:e4:4a:b1:0c:5e:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=f6c02c2b-0d24-4ca5-bff8-2aee02670e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:4d:c7:17:97:fd:ad:37:65:28:5b:01:6e:
dc:22:af:c9:42:90:8c:fb:91:48:fa:8c:4f:78:24:
25:da:21:55:af:cf:6f:8c:33:0d:2e:8f:20:61:de:
e8:73:73:da:f2:88:73:ee:08:55:cc:10:0a:cf:5f:
1d:b4:69:07:22:04:10:1e:53:af:d9:73:2d:e1:f5:
bf:19:0d:d6:59:98:6b:56:6e:41:c5:36:ae:30:e8:
c6:c1:75:69:aa:a0:ad:1d:5b:d1:7f:c1:3c:fe:f0:
ca:09:f8:68:83:2e:55:e0:c6:ac:44:e8:37:ed:bc:
38:56:f0:79:4b:74:c8:02:33:d1:cf:3f:a6:d0:13:
da:14:a0:9c:a0:bc:b7:68:94:53:bd:64:62:a5:b2:
ca:a9:f4:64:ed:3f:9e:d0:3d:7c:37:cf:2c:c9:14:
5c:62:8f:50:be:f3:45:b9:5f:e2:ce:67:37:07:91:
f0:2f:f3:86:3c:b4:15:3f:e9:2a:4b:6a:c5:c1:a2:
84:39:c4:cc:c0:25:51:45:4f:e1:cc:b5:97:8c:fe:
8c:88:b4:b4:b3:bc:23:e6:f0:47:e1:cb:1f:23:10:
42:ef:29:db:7a:7f:9f:44:0f:2e:a8:bd:00:64:85:
84:cb:ba:c8:51:4e:52:39:7e:8a:ad:cd:74:b5:d0:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:31:40:A2:4A:24:4E:01:7C:1F:20:7C:40:F2:34:FD:85:2A:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:1c:17:31:69:24:a1:48:dc:6c:ce:c1:5b:60:8d:d5:92:8f:
e1:b7:90:8e:8f:0c:6e:22:f4:21:c5:9b:f7:33:c2:7c:86:26:
22:06:2c:04:35:0a:9a:f7:aa:e0:5d:09:d5:fe:46:bc:b0:cd:
17:09:25:b9:16:c5:b3:bb:91:a4:7f:83:3a:a6:27:8e:54:d0:
6b:cb:5a:33:12:c3:65:c0:16:61:6c:f8:50:09:b1:24:97:e2:
7e:b2:f2:ca:ac:6b:c7:7f:3b:b8:df:99:70:5e:b7:43:c8:65:
d8:2d:6d:43:b7:c2:a6:20:22:ef:ac:0e:f0:51:92:6c:da:fc:
66:2e:39:aa:1f:b7:59:07:0c:5d:c6:f2:30:78:c9:a5:54:3b:
fd:75:e0:28:69:52:78:d5:95:ef:13:04:98:01:6c:f3:d3:6e:
a2:d0:26:7d:0b:08:4e:9d:76:f2:48:ea:5a:e3:06:1d:e2:35:
78:35:91:dc:76:b3:89:04:26:2a:6a:14:ad:07:23:03:16:94:
09:cf:aa:ef:ea:df:9d:8d:cd:ba:88:5a:b5:24:66:4b:45:02:
e7:5f:7a:73:68:b3:d0:62:ed:77:6e:69:85:02:19:19:67:e7:
29:c3:41:2a:17:8c:a6:97:61:7c:9c:e4:d4:12:5f:c9:31:a8:
e6:47:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:01 2025 by rpki-client