Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/973efeb3-ee28-3fe3-aa19-0216c5b825e0.roa
File: 973efeb3-ee28-3fe3-aa19-0216c5b825e0.roa (raw, json)
Hash identifier: /LQLhVTY8EDogNf5DRcnXc2yNDKu2+z3LOCtMZvYX/U=
Subject key identifier: 0E:E6:03:D0:12:32:18:36:F2:D4:22:2E:1A:6B:2D:29:EC:70:25:B4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A04ABA5E652C4DD3303700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/973efeb3-ee28-3fe3-aa19-0216c5b825e0.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 396579
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4a:ba:5e:65:2c:4d:d3:30:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=aefeea6d-7e54-461d-8d77-97cc49e64f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:a0:68:7a:bf:0c:bb:f8:c4:e2:03:f7:04:
ed:e2:c7:67:d3:44:df:b5:ed:46:28:f6:be:c2:9e:
ae:41:54:04:a6:09:1f:e5:4e:64:99:ab:96:f8:b7:
5e:dd:1c:9a:a5:2a:e6:79:54:1e:57:6a:3d:ba:92:
6e:cc:1c:fd:06:7f:7e:9a:a8:e0:4b:cb:ff:5c:29:
4e:08:db:af:f3:51:1a:51:43:cc:a7:e1:32:cd:07:
7b:56:86:7e:8e:64:c9:22:42:45:b3:de:f2:db:9f:
68:7b:00:5d:dd:c5:69:88:94:a1:e1:e7:1f:9d:7f:
1c:3a:45:e7:d3:9a:8f:17:58:d6:f6:2f:99:5a:c6:
b6:2b:16:9a:09:a6:88:03:fe:b1:38:8d:79:fa:9a:
6a:75:08:a7:e8:47:68:e6:91:68:6b:17:29:f5:8e:
e3:23:c8:9c:6b:7e:d2:e6:54:8c:14:82:66:63:ae:
3f:cc:3f:6f:84:c5:37:68:d8:2e:4a:5b:b3:6c:f8:
1b:e8:f6:ec:b2:b8:2e:d2:ca:a4:28:c7:38:7e:7f:
1e:1e:9e:59:9d:e4:04:37:41:6f:4f:6f:31:16:5f:
69:c3:09:8b:3e:ef:15:f5:c0:45:b5:9d:cb:36:b4:
1d:05:ec:bb:42:23:c1:c2:4e:6f:94:47:f8:48:e6:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:03:D0:12:32:18:36:F2:D4:22:2E:1A:6B:2D:29:EC:70:25:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/973efeb3-ee28-3fe3-aa19-0216c5b825e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:12:eb:5e:32:ac:c8:66:02:97:50:2b:8d:be:da:9d:cd:cf:
a5:42:1f:a4:81:d2:8c:fa:e1:f2:30:18:74:92:e2:af:81:96:
61:a1:a5:4f:94:75:fe:e7:75:a9:ce:94:7a:bd:c5:1d:47:a9:
97:de:da:c1:0d:e1:38:53:60:f3:21:f7:2c:3c:e0:f9:cc:95:
b6:a3:71:b8:d0:a0:69:b3:72:ce:66:e6:8b:8c:c8:08:14:c3:
f7:5d:b5:98:55:56:d6:25:5c:29:f0:5b:d2:65:ab:d6:d1:b5:
dc:68:06:83:bf:b5:aa:f0:37:f3:4f:92:16:6a:be:a4:9b:75:
97:58:32:87:56:89:6a:ae:7c:c4:26:4d:36:4b:6a:65:fa:52:
21:2d:52:db:87:f4:27:d8:c4:8c:f6:bb:f0:7f:c0:27:1e:61:
53:98:53:ba:48:5e:05:e8:09:18:e5:5e:55:7f:ce:e0:4c:68:
6d:de:2f:ea:71:4a:3e:70:f4:76:3e:77:a7:d6:4e:b7:d3:a5:
6a:94:c4:ce:3a:02:b6:cf:25:db:9e:41:a8:8d:15:02:84:21:
bd:99:42:6e:d5:c7:c1:8d:bf:9b:60:07:80:42:b6:81:9a:54:
5a:9e:2a:69:51:d4:bf:92:52:49:73:d8:80:c6:ff:fe:d1:5a:
6c:fe:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:10 2025 by rpki-client