Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa
File: 8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa (raw, json)
Hash identifier: XjaNHqtBsHicvHmecoWbGQL3HgAwGgQjb3hOPfRTiBk=
Subject key identifier: BD:8A:27:9D:9C:B5:81:D5:50:69:A3:1A:95:99:C7:8F:B3:53:0A:02
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E459A4456E9EC8280A760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa
Signing time: Tue 21 Jan 2025 13:34:33 +0000
ROA not before: Tue 21 Jan 2025 13:34:33 +0000
ROA not after: Mon 21 Apr 2025 12:34:33 +0000
asID: 396613
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:45:9a:44:56:e9:ec:82:80:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:33 2025 GMT
Not After : Apr 21 12:34:33 2025 GMT
Subject: CN=fa1b9d65-8a0b-4f08-8265-127f36fdce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:de:d5:e6:42:4b:9d:96:b8:b2:0a:06:c1:
2e:d4:ed:2e:63:04:ba:2a:bc:04:f3:d7:ee:d1:91:
07:6c:c6:ad:9b:68:ba:d5:da:a1:a4:90:99:30:e4:
0f:03:d7:fe:b6:ef:af:2d:3d:15:d8:5e:98:6e:91:
61:c1:03:aa:2c:d6:b3:db:44:7a:5b:f2:dd:e8:2d:
29:8a:11:db:72:92:14:f6:23:42:8d:7f:f1:f6:2b:
89:ad:31:b5:d2:c3:6f:84:20:19:d9:6d:66:5a:95:
bc:04:76:09:ba:47:ad:d3:f0:b8:33:ce:7e:01:ab:
1a:5b:ee:31:55:22:df:e4:a7:94:7e:29:d4:29:95:
49:be:02:47:2f:dc:ea:3f:01:a5:fd:b7:e8:21:cc:
80:e8:f3:d4:87:8d:07:55:52:b7:98:1f:f8:10:13:
18:37:37:51:93:0c:72:91:1c:47:50:1e:40:f5:26:
9a:45:e0:5f:1d:43:7d:be:5c:c8:98:29:ca:dd:13:
54:73:ab:79:90:35:3f:b0:6b:8c:04:15:1a:3a:1b:
cf:b0:26:51:3e:9d:03:9f:ef:bb:b5:10:da:62:98:
3c:30:98:c8:85:78:bd:37:06:2f:ab:12:59:8b:7f:
92:8c:70:4a:86:9e:3b:81:5b:c7:5e:ce:7d:f3:f9:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:27:9D:9C:B5:81:D5:50:69:A3:1A:95:99:C7:8F:B3:53:0A:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:b2:18:9a:92:0e:64:97:d2:1b:af:cd:35:b6:c1:79:07:34:
87:3c:b9:f1:c6:4a:8d:00:53:95:db:56:a5:ce:5a:42:9f:d8:
e0:09:37:50:24:cf:2f:bc:7d:a7:fe:98:06:e3:4b:35:02:46:
e2:9f:7e:85:b9:b7:9b:8a:28:df:a8:69:ac:64:b1:4f:f1:9a:
14:09:41:46:3d:7f:8d:9c:51:5d:0b:6e:a2:2e:d6:5a:bf:8d:
97:4c:1a:e3:ed:37:25:06:34:ed:85:3a:2f:a6:e1:26:5e:78:
c0:96:96:4d:77:a5:17:e9:86:1f:30:f6:f6:48:4d:42:1d:74:
ac:29:64:92:e9:ec:fc:db:c5:69:eb:67:8a:02:44:38:0d:0e:
42:96:ed:05:20:d6:a2:0d:07:48:c0:99:43:d7:c6:d3:35:7e:
23:9b:55:ed:fb:c2:2b:55:c4:91:82:9f:57:11:e6:d7:05:b0:
24:7c:a6:34:6c:12:e7:41:b0:92:3c:ea:76:cd:53:dd:63:96:
7f:e9:8b:f3:e7:35:49:91:ec:7e:32:b9:7a:f6:2f:c0:13:d7:
43:4f:a9:7b:a3:0e:f0:4d:68:4a:c1:5a:b8:b4:aa:f6:91:5c:
8e:ca:9c:d8:fd:31:eb:2d:e6:35:fb:76:d2:ee:81:05:91:b4:
73:b4:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:55 2025 by rpki-client