Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35f5097c-b6d0-37ba-903f-70a31d4effac.roa
File: 35f5097c-b6d0-37ba-903f-70a31d4effac.roa (raw, json)
Hash identifier: HFtkHaSusEo7ePperqD6LYN817gIdOaFy8agc34T/0E=
Subject key identifier: 73:5F:2B:9A:AB:C8:5F:79:25:FB:3B:23:75:88:43:CB:E4:DF:4B:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837201249A75EDD58BA3050F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35f5097c-b6d0-37ba-903f-70a31d4effac.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396589
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:12:49:a7:5e:dd:58:ba:30:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=0530e067-b2ba-4263-a876-fbbb35a16d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:eb:f8:af:a2:7f:9f:5f:13:89:49:9b:17:
61:01:b4:94:23:5b:9e:dd:0b:cf:d5:0d:df:d6:aa:
84:5e:e2:84:6d:5a:03:ce:ee:b8:57:69:22:6a:a3:
26:b9:33:84:dd:46:23:2b:19:0a:4c:d3:36:bf:e0:
71:d2:62:32:c3:99:14:1c:ec:e2:d5:1c:fa:40:65:
ce:39:36:f3:e7:df:b4:23:a5:2e:f6:db:9e:73:96:
4c:07:b7:51:a1:06:63:19:94:83:c5:74:62:5f:49:
7a:3a:03:3e:0e:d9:38:38:23:7e:9b:2a:37:7f:ed:
79:c6:61:52:14:29:36:7e:93:c0:6e:20:47:ac:93:
4a:ad:28:5e:84:1b:a5:1b:0c:33:7e:79:71:55:05:
29:ca:d0:b8:15:90:63:b2:f5:c7:fd:14:68:da:b4:
42:7d:d2:82:05:6a:bd:a0:60:5e:9b:61:b2:79:a5:
d7:0a:85:72:64:03:68:b9:6d:9a:28:8c:a4:1e:7d:
ad:9e:68:cd:5e:d9:c7:3d:46:26:c8:71:21:3f:51:
8e:45:52:8d:7a:2e:9d:32:db:b6:7a:c8:34:00:ad:
bc:fd:94:48:87:87:40:18:8f:49:7a:21:5f:21:f7:
53:6d:cd:c4:dc:6b:59:0b:4d:3c:a7:ff:b3:c6:b6:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:2B:9A:AB:C8:5F:79:25:FB:3B:23:75:88:43:CB:E4:DF:4B:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35f5097c-b6d0-37ba-903f-70a31d4effac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:96:9f:de:06:00:51:50:94:d0:72:96:53:75:93:e4:9d:d8:
45:06:ec:b7:be:78:3f:ab:bb:14:d2:ea:dc:ca:86:51:f5:34:
94:37:94:81:8b:0d:0c:eb:36:c7:9e:00:67:47:f3:ea:83:8d:
cf:a2:86:0b:62:68:e4:b9:15:87:2d:3d:34:b0:58:bc:43:7b:
18:0a:90:4e:41:35:88:3c:12:50:81:5d:0c:d5:a4:87:60:6c:
b4:d6:d4:a7:c6:f7:43:d4:2a:42:7b:47:3e:36:4b:eb:01:d7:
4f:45:c0:ec:e4:73:88:00:fd:e2:54:c4:cf:ea:d2:08:a9:94:
67:de:b4:d9:56:f7:ce:e6:35:f2:d1:8a:37:7e:73:e6:32:3a:
5e:80:fa:f2:a3:9e:79:45:39:c8:8f:6b:8f:49:ae:19:7e:16:
c8:b2:90:a4:c6:01:49:d9:cc:a2:8d:50:09:d4:74:e4:c8:01:
ca:5e:92:40:7d:ee:a1:7f:f3:04:83:ae:97:70:92:03:01:7d:
1d:75:47:10:6e:d0:af:81:76:f4:f4:7f:a3:6c:77:da:fd:ab:
fd:73:f7:5c:bf:65:4f:87:c2:bc:0b:d4:ad:7c:11:b7:1f:38:
8a:80:a1:f0:87:9a:a0:02:56:d7:fd:f3:69:75:9f:35:59:56:
64:71:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:15 2025 by rpki-client