Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890b8d7a-9202-3ffc-9145-1641b74d5f83.roa
File: 890b8d7a-9202-3ffc-9145-1641b74d5f83.roa (raw, json)
Hash identifier: Ui+XB4xurGC9DGGI6nFCz5BNqhydPlqHRjv/WuBCFSs=
Subject key identifier: 92:4B:5B:05:3E:6D:15:E9:6F:E9:DE:52:D7:AB:ED:40:D9:00:28:42
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837201515C947ABA64054F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890b8d7a-9202-3ffc-9145-1641b74d5f83.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396609
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:15:15:c9:47:ab:a6:40:54:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=6142a2a0-e599-4776-a6cd-d695c86a2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:73:be:64:4b:db:75:4b:65:a3:b7:bd:83:d1:
e1:39:55:20:43:53:0c:68:c3:ef:bb:94:0e:84:ea:
1c:1b:50:2b:68:e6:22:8a:de:48:79:fb:e3:48:14:
5b:97:d0:9a:5a:6c:2d:ff:76:32:2e:c9:1b:42:59:
c2:34:de:3c:c6:f8:b3:ed:17:aa:9d:2f:e6:60:3a:
c9:ce:cb:dd:4d:03:9b:1c:1b:4b:51:af:24:db:e1:
f7:24:5f:75:81:07:8a:99:08:7b:34:e0:4f:b1:75:
35:48:71:5b:c9:32:b6:e4:c9:e5:04:78:61:e7:fc:
4e:91:d5:f3:2c:c6:2b:32:b9:f7:fb:2e:c7:b4:6a:
12:ad:04:2e:0b:a9:bb:e4:c6:5c:65:e1:27:f1:63:
f9:7e:96:73:9e:14:1d:5f:0a:7c:8c:f7:98:f4:35:
81:48:bf:a2:21:6d:a5:61:e2:a9:4e:bf:44:e5:ad:
45:b1:07:42:d7:f6:f8:68:c7:9b:fa:b0:43:68:b0:
d0:15:3f:3d:d7:ca:90:1a:88:e8:90:80:4e:a1:5b:
47:fa:0d:10:f2:6a:b7:5c:07:fb:0f:5b:0f:e2:22:
76:23:78:42:95:db:7c:70:56:bf:66:4e:96:da:4d:
40:b4:31:8b:01:8c:92:eb:8f:9f:a8:53:7a:3d:41:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:5B:05:3E:6D:15:E9:6F:E9:DE:52:D7:AB:ED:40:D9:00:28:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890b8d7a-9202-3ffc-9145-1641b74d5f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:0d:8d:84:7d:c4:7c:8c:79:ce:36:7e:cf:ad:48:74:d0:c1:
c0:bd:53:ea:67:47:b2:16:72:23:c7:12:d7:4a:89:5e:5f:9a:
24:3b:8f:5a:39:30:07:fe:41:16:30:40:cc:9e:de:c5:7c:c9:
6e:f3:ea:75:2a:50:10:c3:cf:7c:de:3b:64:2f:50:8b:4b:a8:
e6:24:f3:b3:71:e1:3f:04:60:1f:cd:dd:9c:25:f5:af:69:21:
5c:7c:38:7f:1e:ee:1e:2a:ce:c3:6e:1f:a2:d1:55:87:d4:a9:
1f:25:94:50:77:3a:97:6c:b5:cf:d1:5a:cc:40:d2:0f:ce:d5:
de:90:85:85:88:54:41:dd:2c:d8:d2:54:5d:bd:d9:20:1e:6c:
de:a8:10:cf:1c:6c:dd:fb:d6:88:df:60:84:d5:98:1b:31:70:
27:54:6c:93:02:d9:4d:c8:34:d8:b9:10:7a:2d:99:31:3b:15:
c4:a3:4c:0a:de:6a:e3:be:d8:33:f7:df:87:46:da:f7:d0:c8:
0d:39:58:d5:f9:10:13:5c:7e:16:bb:5e:d4:6e:61:29:a1:6f:
76:bf:59:ef:1a:2c:1f:27:95:6c:55:90:22:09:fb:98:21:dd:
a1:90:80:a6:ee:d8:78:0c:18:a9:83:a2:24:64:1f:b5:ed:0b:
9e:d9:d6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:44 2025 by rpki-client