Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa
File: a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa (raw, json)
Hash identifier: t9XnBvStqsX19qB6UVSImRMnbwBOrsKuUxkShq2evrA=
Subject key identifier: 9D:90:3D:B7:1A:67:2E:BB:7F:FB:4B:6B:CE:C5:17:09:F7:44:C3:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58B0AFE360E29C827CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa
Signing time: Thu 23 Jan 2025 13:38:23 +0000
ROA not before: Thu 23 Jan 2025 13:38:23 +0000
ROA not after: Wed 23 Apr 2025 12:38:23 +0000
asID: 396544
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:8b:0a:fe:36:0e:29:c8:27:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:23 2025 GMT
Not After : Apr 23 12:38:23 2025 GMT
Subject: CN=4064c46a-84b3-4a7d-990d-aec409d2e017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:90:29:47:df:9a:8f:c5:41:66:c2:39:ad:
5f:69:8b:d5:d4:73:b2:b5:2e:0e:a0:1a:f0:ea:8e:
52:ad:44:7e:27:56:89:e8:32:cc:8d:f7:3e:92:e9:
6b:c1:f8:63:f7:92:52:11:7d:0c:57:46:2f:bd:df:
d1:b1:44:26:cd:8b:94:ee:a3:e2:e9:ec:b1:92:2d:
91:70:8a:ab:53:37:a5:52:2f:a5:a2:b5:23:18:36:
98:3a:a8:3d:ca:d0:c0:f2:3c:dd:f2:fb:55:60:3a:
3f:56:d6:6f:aa:c4:fe:09:fb:ab:00:a4:75:d2:5c:
37:cd:3a:d2:bc:c3:79:ce:1a:cd:ef:d0:60:d3:8b:
47:29:12:12:5a:35:35:92:f5:c5:da:f7:38:ec:f7:
02:f4:ef:c1:f8:4d:8b:a6:9a:2d:f1:87:14:57:a8:
50:32:74:e1:ab:b7:fe:16:8f:6d:fb:c4:fc:87:bc:
02:ad:5d:23:43:a8:ac:af:1a:12:6d:f1:04:33:a3:
d4:e7:10:11:fe:99:da:31:e3:dd:e7:de:44:73:f1:
34:42:f8:3d:a2:ec:5e:01:9f:7c:4a:98:2d:85:1c:
67:8b:f4:b9:40:96:26:25:6c:57:5b:34:60:47:c0:
ec:05:2d:61:02:31:9b:ff:6c:00:b5:15:37:cc:17:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:90:3D:B7:1A:67:2E:BB:7F:FB:4B:6B:CE:C5:17:09:F7:44:C3:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:3a:7f:66:b9:18:a7:3c:d7:45:1b:57:03:cd:e3:1a:eb:83:
1d:c3:d9:ac:10:d7:61:3b:4e:21:8d:15:90:bd:ea:15:6f:b1:
4e:70:8c:5e:1b:05:d1:2f:f4:bf:20:a9:37:0d:96:7b:a4:4b:
09:c3:b8:4d:00:24:b0:b6:d6:8e:2f:fd:b2:f8:52:ff:cc:45:
14:09:76:0f:89:b7:bf:f3:66:4f:2a:35:8c:ec:ad:17:30:1b:
16:8e:36:9b:ff:c6:64:3e:42:4c:03:1a:3e:03:c3:48:d2:04:
b0:14:c6:00:ae:b6:69:cb:a6:64:32:ea:5b:87:c9:f4:28:5a:
28:49:a8:51:76:04:64:02:73:f7:05:08:6c:de:a4:d5:b1:6e:
ef:56:56:30:d2:8c:a2:72:1a:43:a3:16:89:6e:92:3e:78:51:
e3:43:35:f5:5f:18:ab:cf:10:59:d6:eb:fa:8a:ce:41:90:4c:
f0:8a:b3:0d:5f:9a:17:2f:54:aa:03:7c:95:95:19:26:0d:8b:
a1:59:4e:67:ab:3d:34:34:15:6f:0d:4e:2d:65:b1:89:b5:b6:
2b:28:ab:aa:1d:35:a0:9c:06:31:b2:67:ab:0f:a6:15:60:53:
f4:d5:95:2a:69:58:a3:ec:27:ef:88:82:0b:50:e5:3b:f3:1f:
84:50:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:39 2025 by rpki-client