Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7936ee6-47c2-3925-be6f-aed8bdfe6d85.roa
File: a7936ee6-47c2-3925-be6f-aed8bdfe6d85.roa (raw, json)
Hash identifier: 7g8LtoK8v2+B1Jh9VClMe78wic2djkVBDVd6/6zz1aQ=
Subject key identifier: C3:27:CA:A4:DD:40:67:0C:F8:DD:00:18:78:8F:4A:7D:3C:91:64:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430B929845928DA15F9B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7936ee6-47c2-3925-be6f-aed8bdfe6d85.roa
Signing time: Thu 19 Dec 2024 13:45:20 +0000
ROA not before: Thu 19 Dec 2024 13:45:20 +0000
ROA not after: Wed 19 Mar 2025 12:45:20 +0000
asID: 396603
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:0b:92:98:45:92:8d:a1:5f:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:20 2024 GMT
Not After : Mar 19 12:45:20 2025 GMT
Subject: CN=9bedff47-32cd-47ac-84b3-13d099841246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:ae:df:e0:00:91:2b:d7:62:e8:1f:d2:86:
e1:2c:75:14:81:93:db:4c:f3:c1:43:ce:02:fe:6f:
1e:b0:fd:a1:45:3b:9e:d6:2b:5a:0b:95:5b:1d:20:
8f:f0:55:a8:89:f4:75:64:72:b7:7f:d5:ce:ea:e3:
55:eb:a0:4d:2b:bc:df:b5:2e:c3:93:3c:78:93:02:
57:3b:3e:32:70:6b:40:08:18:87:c5:48:ba:52:41:
7e:a9:b9:22:e1:f7:0a:d3:31:f5:ab:fa:ad:38:a1:
3d:b1:b0:3c:20:91:51:5f:b6:c8:3b:47:23:88:e1:
ec:df:99:be:6a:65:20:fb:37:f6:53:3b:5b:40:b7:
72:b9:2c:02:ea:ef:eb:fa:39:c8:de:66:da:e3:9d:
ae:8a:f2:96:4b:d4:b0:06:2c:5c:8c:3c:f3:31:31:
94:1b:ee:8d:7a:5b:76:65:22:96:1b:15:15:96:a5:
22:8d:c1:7f:29:7e:fa:9f:b0:bf:bf:3c:d6:b1:9b:
15:51:7a:a9:a1:01:c5:a8:11:ea:e9:fa:24:55:db:
30:9d:d1:87:35:d5:cf:4e:64:94:48:ac:53:07:38:
39:12:8e:8b:fb:53:80:18:e6:1f:03:c0:21:a9:9c:
2a:ea:22:3e:78:03:e6:48:15:0e:11:d7:d0:fe:98:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:CA:A4:DD:40:67:0C:F8:DD:00:18:78:8F:4A:7D:3C:91:64:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7936ee6-47c2-3925-be6f-aed8bdfe6d85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:9c:12:c6:e0:8c:be:73:d8:0e:bb:20:ee:14:fd:37:e2:56:
79:21:7e:c0:ba:9e:be:02:e7:b0:74:be:fc:de:7b:86:7a:76:
e8:d1:45:44:2e:58:60:74:20:c3:72:c2:af:c6:21:85:74:ea:
14:58:7d:f6:34:a0:a1:0f:80:41:90:37:27:2e:01:4d:16:e2:
22:a4:0e:36:b6:20:f3:88:19:79:2f:c6:15:f2:35:06:83:41:
28:cd:dd:e5:42:32:ff:56:e0:95:22:7c:51:02:fd:b2:93:72:
6c:c5:ae:8f:06:0d:33:51:2a:9f:27:a1:c6:14:bc:ba:ba:87:
c6:e6:67:5f:b3:ef:38:47:3f:7e:48:17:17:86:44:1f:fd:06:
e4:bb:31:ab:6d:20:60:4a:0b:6f:81:7c:a1:b5:a0:7a:f6:85:
bb:39:bc:ec:e5:66:d8:59:4e:3d:23:49:49:ea:2a:45:ce:65:
7d:24:3d:a3:82:df:c1:b4:8f:3f:52:5e:a6:ab:7b:d1:cb:19:
a9:46:b9:3b:cb:43:13:ec:8b:9f:1b:c8:cf:98:db:ee:c8:f1:
74:0c:f7:ed:38:a9:a7:9f:b4:55:1d:b6:dc:b7:8e:ec:74:e2:
09:d1:3e:9b:05:b2:ee:8a:a8:0f:db:6a:19:82:68:04:ec:b8:
83:c1:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:40 2025 by rpki-client