Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/396cd327-0640-30af-a4a0-53415a32ae1c.roa
File: 396cd327-0640-30af-a4a0-53415a32ae1c.roa (raw, json)
Hash identifier: RB3TclqoPf57f4f3HrJaDtiTIlwBa+xn3jZm26Q9i9s=
Subject key identifier: A2:91:C6:73:48:37:8A:7E:41:18:24:9A:E5:0F:5B:E9:97:E1:76:EF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848451578D65C98092A7ABAA540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/396cd327-0640-30af-a4a0-53415a32ae1c.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 25485
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:78:d6:5c:98:09:2a:7a:ba:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=a2d5a179-2457-4332-b36e-4b3bc4245c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:74:45:a9:0f:6b:2c:cc:08:9a:87:d5:42:
d9:7a:d9:43:6b:dc:bd:be:17:5b:04:c7:66:cb:c8:
37:63:d4:ca:36:1f:21:6a:ce:b2:54:0a:3c:b9:b6:
6d:95:58:c2:18:23:f1:b0:32:34:86:01:e2:92:df:
be:b6:e7:cd:45:bc:fc:0a:55:53:5f:da:6f:f6:61:
a0:57:61:a5:f7:46:fc:b1:1a:81:df:54:0f:47:45:
c0:1a:21:1d:c1:58:58:01:27:c5:42:fe:78:c7:ff:
12:4c:81:b3:5d:6c:83:e0:1c:5c:5a:fd:b4:b8:97:
a9:f6:01:40:5f:66:46:86:14:d6:0c:02:4a:32:ed:
96:e2:90:48:a2:be:6d:5e:55:34:83:05:1e:5f:2e:
6f:de:49:1b:d6:5e:bd:07:fc:a3:0c:7c:31:09:ab:
ad:bf:aa:e7:da:b0:fc:22:c4:fc:4c:a2:b4:7f:32:
39:5b:3f:b4:9f:ef:7c:f4:c1:12:32:47:e2:db:01:
a6:19:68:35:d3:ea:12:19:54:fa:3e:71:c1:c7:15:
a2:a4:a9:63:95:b6:06:b2:59:a3:d8:f6:d9:b7:be:
30:cf:cd:e9:23:05:8e:81:23:6a:64:e1:57:ba:c5:
51:21:9f:ea:96:3a:32:b4:b7:c1:05:26:90:1c:42:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:C6:73:48:37:8A:7E:41:18:24:9A:E5:0F:5B:E9:97:E1:76:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/396cd327-0640-30af-a4a0-53415a32ae1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:79:40:c3:ac:f6:a3:11:58:ca:b5:af:b6:87:93:67:c2:c6:
21:18:93:74:64:56:41:98:17:d3:26:15:9b:fd:e9:cb:14:6a:
29:09:f5:5a:df:15:1d:f0:cb:81:6f:b4:2b:dc:2a:b4:9c:14:
28:34:c0:f0:64:1b:ea:e9:3a:b8:78:95:70:91:34:be:aa:62:
e8:02:fb:ca:86:d5:6f:1e:af:45:fc:51:fb:74:41:d3:51:41:
32:62:58:f7:cf:9f:45:43:b0:5d:16:11:e0:2d:ab:99:16:01:
dc:fc:be:04:2d:0e:23:e8:9f:04:49:88:19:ef:8f:a1:91:b6:
8f:9a:8a:2c:7b:65:16:d9:60:6c:27:cb:34:d7:a3:4d:88:fb:
5d:da:19:3d:88:7a:6f:54:04:2f:21:46:92:57:03:f4:d0:18:
dc:2a:20:ba:3c:66:5c:5f:63:1d:5a:89:72:ad:06:fb:ac:eb:
3f:27:62:4b:4d:75:7b:60:dc:2e:ce:34:4a:e3:62:4c:f6:b3:
53:2d:88:27:d4:65:19:73:7a:02:bd:98:25:b8:b0:9c:b9:be:
ed:44:d9:de:74:83:e9:d6:52:f1:81:74:9b:96:1e:56:38:b5:
c9:17:00:69:e9:10:27:91:41:be:46:8b:a1:e0:38:b0:29:3e:
cd:a8:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:03 2025 by rpki-client