Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63154c0f-c689-3224-86db-8c3876cf9d0e.roa
File: 63154c0f-c689-3224-86db-8c3876cf9d0e.roa (raw, json)
Hash identifier: bb3lb3Z8EOQ4MufBJ8QYBFzloNR44a68wArUhkdytNA=
Subject key identifier: 32:DE:3A:D5:0F:3F:27:BC:43:18:BE:7C:F8:8C:E6:C4:E0:F1:D7:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837200F356F93937511DABC88
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63154c0f-c689-3224-86db-8c3876cf9d0e.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 10515
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:0f:35:6f:93:93:75:11:da:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=01f76753-5c77-4375-88ec-ef8536b88bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:92:22:3a:a4:f5:1e:a3:21:5f:74:78:d0:
cf:c0:b6:73:ff:eb:80:d5:1b:ac:9b:af:51:35:ff:
fd:2a:d3:bf:95:9d:16:5d:a4:0f:69:54:0c:ec:c5:
8f:58:11:73:a8:75:00:aa:88:c6:1d:12:e8:13:64:
ce:fe:cb:19:9d:ea:5f:7f:e6:9a:b5:d0:1e:f0:8b:
01:47:7a:c9:ce:2e:98:98:ac:ab:02:81:2c:06:d7:
61:ff:3d:0e:56:5a:84:33:19:2c:e3:c4:2e:b1:f0:
b3:0a:43:c6:6e:eb:b4:a3:d5:32:27:be:47:58:b2:
59:41:ea:fe:4c:a8:f6:53:e3:ae:0a:67:0d:30:15:
01:3d:bb:29:4b:fd:d7:13:10:e3:9e:7f:13:eb:b3:
f4:92:f8:45:25:2e:6f:69:5f:ba:f6:0c:22:b5:59:
9e:3a:78:08:a1:e5:06:67:89:fe:69:6e:3e:3e:9e:
f4:fc:d9:bd:f8:80:0a:49:09:09:ad:20:99:ba:f9:
bc:41:32:f9:59:97:37:21:ac:a2:b5:fb:6b:55:a5:
ec:f5:5d:83:0a:02:e1:12:ae:19:6f:7b:d9:e4:45:
5d:5b:0d:4e:4a:0d:5c:5e:02:30:b7:d8:a2:54:6a:
d2:1b:ba:ee:e1:d3:11:ab:b1:4d:a3:21:e8:56:4c:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:3A:D5:0F:3F:27:BC:43:18:BE:7C:F8:8C:E6:C4:E0:F1:D7:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63154c0f-c689-3224-86db-8c3876cf9d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a5:2b:2d:24:cc:37:ee:bf:35:32:b8:7e:fa:59:f4:8b:ee:
7f:a8:e3:58:73:b2:44:21:25:5a:b5:1d:25:0f:8c:59:7e:de:
5e:f4:10:ca:36:b5:da:20:08:84:60:1d:3e:25:f4:b2:d1:dd:
80:02:6f:70:78:ec:23:36:88:ad:1e:f4:86:db:c8:12:5e:e5:
f2:31:1c:f5:8e:8d:92:fa:40:62:35:75:7a:e9:68:96:3f:cd:
91:2e:7e:9a:e2:a9:a8:33:7a:89:21:4a:7a:bd:14:c1:a6:d6:
44:39:cc:30:85:3a:1b:47:f0:ce:d6:6f:d5:0d:6f:c1:c2:5a:
cf:04:b5:1b:b0:38:43:ea:d9:0e:05:a9:93:8f:f6:a0:77:b3:
cf:e8:6d:97:de:28:2e:96:fb:ed:b9:2e:b8:42:c5:77:2d:27:
c4:00:a0:aa:99:71:96:16:98:44:d4:66:8d:5f:83:9a:dd:6c:
03:21:f8:38:7e:08:22:09:84:e3:3c:47:e8:d1:24:dd:fe:41:
da:b7:44:5b:f2:e4:aa:d1:d5:8c:98:6e:63:de:2b:08:b5:43:
a1:d7:43:f0:f9:80:98:49:9a:1d:0a:a4:79:87:a1:6a:35:f4:
f4:2b:a5:76:4f:68:bd:18:b7:b0:ce:70:61:36:a2:fe:5b:2b:
60:07:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:36 2025 by rpki-client