Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64b16cc4-907c-36d3-b97e-4cd05e27c0a5.roa
File: 64b16cc4-907c-36d3-b97e-4cd05e27c0a5.roa (raw, json)
Hash identifier: tGxfK+1E3vquuEncmwazapRWdEcIGgxnHIRUAJZHp3c=
Subject key identifier: C7:8C:9B:DD:20:95:CC:DE:EA:C4:58:8F:6A:3C:52:23:CA:DE:32:B7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B0348B84DB160E7A18520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64b16cc4-907c-36d3-b97e-4cd05e27c0a5.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 36619
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:03:48:b8:4d:b1:60:e7:a1:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1914a103-ca8a-4bf5-9a50-ecd71ad66d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:ed:b3:45:b7:7d:25:d8:78:7e:6c:95:ad:
24:23:57:80:59:7c:25:29:dd:ad:32:a0:62:cf:20:
d9:73:88:c2:42:c1:b3:24:a9:7d:f4:9d:1d:6e:5b:
2b:3d:31:10:c6:96:49:3a:4f:02:be:04:25:27:88:
99:d1:ba:e4:11:bb:13:a8:00:1b:66:aa:e9:ce:5e:
bd:e6:eb:ba:0b:95:1a:32:a3:cb:59:2d:b7:a4:07:
4b:e4:6d:8a:f7:48:61:d1:ce:d7:70:89:6d:39:4c:
ec:08:b8:06:1e:c9:2e:20:52:1d:57:2b:51:56:b4:
2b:b2:1b:40:be:ce:94:23:9e:1e:b0:36:63:43:60:
0f:ae:42:e8:e0:89:63:8f:1f:dd:6a:81:0f:52:5b:
e6:a9:17:6b:03:af:e6:34:b5:41:d2:94:79:95:fc:
b6:7a:d7:c1:c5:2b:86:20:5c:c8:37:f2:89:bc:93:
67:25:13:c9:25:b1:66:de:fe:39:7e:db:e8:10:a1:
e1:26:aa:e5:3d:28:28:2c:81:c3:42:ee:fd:9c:e3:
ec:ec:03:03:28:0e:22:7d:b3:cd:53:fb:62:0d:75:
87:29:1e:f6:01:69:16:57:47:7d:1a:e9:b5:32:57:
91:a8:2e:86:77:13:b5:d0:f2:ce:bf:e8:a0:4b:7f:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8C:9B:DD:20:95:CC:DE:EA:C4:58:8F:6A:3C:52:23:CA:DE:32:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64b16cc4-907c-36d3-b97e-4cd05e27c0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0e:e4:62:c4:c0:86:ea:80:0c:bd:c6:f1:f3:3f:88:00:c6:
d9:ab:cc:ee:db:f8:ac:7f:4f:9e:75:e1:35:27:aa:f5:56:85:
3b:9c:3e:7d:18:7d:46:27:84:2b:f0:9e:c7:4d:4e:f3:56:4e:
26:b4:1e:71:fc:e7:ed:68:90:e6:65:9e:ce:b4:4f:21:c9:89:
49:80:d5:10:f8:d6:47:b8:12:03:e7:34:1e:c9:db:77:6b:8d:
72:04:66:9a:cd:66:fc:af:a5:61:85:69:db:f7:fd:a2:3a:c8:
59:d8:6f:c1:c0:c1:af:8c:98:5d:4b:73:ba:47:e3:73:fb:5e:
e9:60:a7:27:25:5b:c7:50:00:30:67:01:de:bf:a8:7a:8c:8b:
9e:93:55:91:2b:9d:61:6f:d5:7f:b6:04:9c:aa:c2:5f:51:1b:
7f:ba:70:13:b9:a4:f1:45:2a:79:79:53:d5:42:56:fa:8a:21:
f1:29:95:a2:59:e0:d2:61:bd:3c:87:df:27:ab:ef:97:01:8d:
88:25:a2:11:fc:53:1e:7f:96:d9:96:62:3a:cd:2f:a8:0d:d7:
ce:f9:7c:90:07:39:0e:d9:a6:80:73:cc:0a:36:e1:01:b5:f6:
41:52:63:5b:59:22:c1:44:e4:74:0d:18:41:24:49:1c:4c:a5:
1d:a1:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:36 2025 by rpki-client