Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa
File: a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa (raw, json)
Hash identifier: UTAMZj/9X3XRfZdh9ukbx7PDJVHQgZHmwIg1Ls82W3s=
Subject key identifier: 03:DF:06:05:E9:99:5B:68:1E:6D:71:D7:54:8C:FB:08:10:CE:89:74
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372013DB5D5DAFE681BC67C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396559
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:13:db:5d:5d:af:e6:81:bc:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=d98c46ae-bd95-46be-9ea6-13367e2ab795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:32:54:d2:05:56:19:62:13:3d:6b:ae:bf:
63:2a:73:17:6f:26:5a:b9:e4:d0:8b:69:37:de:aa:
40:9b:b0:d3:40:d6:8b:dd:b6:d5:f6:bc:20:28:bc:
e9:94:1d:66:d1:4c:41:41:42:7e:d3:3b:aa:cc:10:
4b:8c:60:0b:ec:f4:f2:53:5e:38:b7:03:2c:6c:7c:
bf:6c:66:48:12:ce:dd:01:9b:79:a6:ab:32:73:fd:
ae:9c:f5:ff:76:80:a5:ca:19:79:23:56:e8:b8:b6:
a7:b5:42:41:13:62:1b:9f:11:34:e6:63:ab:89:a0:
c0:d5:4c:ac:c3:5e:d3:3c:24:18:3f:07:c3:48:81:
16:45:94:aa:5c:d8:01:8c:8b:7f:eb:71:12:71:5d:
94:7a:ff:65:2a:aa:c2:a4:4c:61:78:b5:61:d8:b4:
15:c2:e6:f8:2c:ef:2d:7c:42:b3:11:8b:7f:13:86:
23:9d:e0:61:91:b9:14:d3:59:a6:ac:7f:c9:ca:d4:
ba:63:2b:82:b4:3f:1c:eb:a2:9c:8a:73:b7:68:43:
99:e2:3e:9b:73:af:91:b6:12:47:6b:3e:67:2a:55:
63:d5:3d:62:03:47:93:51:6a:69:06:af:09:7e:d2:
47:bb:0b:5a:67:52:58:ee:c7:77:0e:52:0e:16:b6:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DF:06:05:E9:99:5B:68:1E:6D:71:D7:54:8C:FB:08:10:CE:89:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ec:bc:d9:f0:b3:58:9b:fd:b0:77:27:9b:f9:d9:5e:c0:60:
43:a0:7b:f0:57:0a:84:ad:18:11:a3:7a:83:55:9e:88:66:fa:
5a:18:b2:46:b8:11:7b:4f:0a:4b:94:e0:63:88:8c:8e:13:20:
69:89:b9:e6:6a:8a:e2:3d:dd:29:20:82:93:f1:a6:12:73:e6:
4e:bc:07:5e:4d:50:66:9a:d0:21:94:3c:53:9c:39:c1:1a:e0:
05:26:b7:bd:be:be:18:d0:e5:86:49:f6:01:92:36:d4:80:d8:
a1:f6:58:b9:3f:d4:6f:8c:99:24:61:08:52:c2:ff:d0:f0:e7:
57:39:12:e0:66:5f:2e:9a:b2:c1:92:db:60:93:7d:38:a8:eb:
ac:3b:71:27:e0:c4:a5:2d:f7:cb:dc:0e:24:c7:fc:61:43:1f:
50:b3:c4:01:cc:0e:dd:4b:0c:ea:3f:f7:10:f4:49:ad:34:9b:
7a:3f:82:69:f5:bf:e0:94:52:5d:21:cd:65:2c:e9:29:02:08:
07:53:3e:38:bc:d7:7b:c0:7f:d0:f7:58:e5:eb:a5:db:3e:58:
a1:1f:5d:70:ac:db:3e:36:74:91:93:53:98:fa:dd:1a:ce:0c:
90:56:06:bd:eb:0b:44:68:05:cc:76:f8:be:16:c4:d4:f6:fa:
d7:e6:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:08 2025 by rpki-client