Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa
File: 5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa (raw, json)
Hash identifier: t+KuZJTDdVV+AI1c4qVmUCX20UEVvWetw9pt21wkFwk=
Subject key identifier: A0:14:6B:94:BA:7E:1D:7F:26:0B:D9:F4:E5:D9:58:CD:FF:68:F3:84
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B024E47302F04B073D9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 397207
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:02:4e:47:30:2f:04:b0:73:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=f00e7046-4288-42c9-9b29-67771e5cd10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:14:79:00:46:2d:c9:bb:28:24:83:d7:0c:
97:01:36:61:f0:2f:f2:8d:bf:26:06:00:45:41:2f:
42:9c:5d:c8:29:23:d1:ef:5a:70:a2:6c:6c:98:2c:
4f:e6:ab:53:65:3d:38:be:73:61:ad:65:87:dd:19:
bb:2e:aa:0b:0b:f3:21:a0:ff:5f:22:2b:64:67:aa:
43:05:9d:65:11:1f:42:ad:44:fb:9e:83:98:86:25:
be:64:b9:34:6d:97:a4:ba:1b:24:35:f0:10:57:66:
ad:ce:39:2e:d1:9f:6d:ec:48:0d:1a:74:7f:c6:ad:
11:94:3f:68:f9:a5:f9:5d:87:f1:98:26:bb:34:59:
21:13:47:aa:e6:81:a4:0a:a2:7c:3d:64:50:ca:13:
64:33:62:dd:bc:32:e1:d4:74:83:c2:df:15:19:02:
6a:fe:c4:47:91:33:40:d5:c2:3b:de:68:3d:53:39:
a8:36:1b:3c:fb:af:a6:57:6a:09:ce:3c:3f:18:8e:
98:0b:51:61:38:22:b4:d2:e9:79:c2:7f:46:f8:80:
2e:3d:6d:5e:4b:e7:af:19:3b:f4:24:c4:54:1e:82:
b0:09:18:b7:f9:cb:75:11:30:1e:41:58:d1:8e:b3:
3a:80:26:51:d4:b0:f0:1a:94:3a:0c:bc:a6:60:5f:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:6B:94:BA:7E:1D:7F:26:0B:D9:F4:E5:D9:58:CD:FF:68:F3:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:bc:c9:de:15:a5:a9:f5:e6:57:fe:d6:d8:3d:81:c5:14:53:
9b:38:91:58:97:14:99:76:e9:15:17:f9:81:8f:8a:d5:e7:3d:
a6:1e:3a:9a:dd:08:29:60:6d:2f:fa:44:a2:74:17:77:02:ca:
d3:b8:53:fc:e3:48:9d:6d:b8:c1:7f:96:f9:fb:f3:43:98:c4:
67:c2:68:be:2f:c6:ee:1e:a2:0d:4c:2b:b4:7b:15:52:f9:00:
81:b5:3c:6d:a0:cf:d6:15:b7:fb:22:ed:e0:2f:5e:47:b6:67:
f4:c7:31:e2:76:aa:f7:fd:74:1f:a7:07:67:24:bb:d3:ea:93:
4c:7e:ed:75:ab:f1:63:42:80:88:83:8c:0e:dd:bc:91:3f:03:
33:b0:13:e6:52:70:da:29:7f:e4:3f:9f:1b:5f:f3:14:ec:48:
16:0b:99:a8:5a:b2:23:a0:9f:91:94:2e:ec:60:02:f1:63:98:
28:bd:f3:d1:35:de:46:29:20:96:a6:d5:d1:d6:cd:2f:dd:bd:
a6:c1:fd:04:1b:dd:7b:ac:1a:ba:31:02:4b:7b:eb:d7:90:0d:
94:3e:0d:8b:69:5d:a6:f9:dd:8c:98:e9:eb:dc:cf:3c:74:52:
92:b2:72:f4:b5:7d:67:8f:52:f1:47:98:67:82:ca:b8:08:83:
1e:c2:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:49 2025 by rpki-client