Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
File: b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa (raw, json)
Hash identifier: Ur3OyH+qKPBzxvftMWDk6hmBdNEmXrW7nLwka9SWndU=
Subject key identifier: D2:9C:40:8A:D9:6C:84:79:15:4F:6B:AC:FC:29:ED:4F:46:8D:1E:73
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A0491F709E8939EB566C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 396544
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:49:1f:70:9e:89:39:eb:56:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=9e9f38cc-7e20-447c-838b-89cf9934e468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:4e:1d:02:9f:d4:0b:a6:8a:5a:c1:d2:59:
21:61:e6:27:f6:1b:c5:44:cb:d6:98:a1:4c:bd:97:
00:8a:d4:ac:2c:fe:ae:e7:ed:b6:1f:5f:06:88:cc:
2c:c1:41:7b:de:cb:b6:05:61:d7:05:c9:aa:67:4c:
cc:66:69:66:f3:2c:6b:b9:49:db:e1:5b:dc:67:a9:
59:57:3d:ef:5e:0c:a7:75:8b:7f:ab:7f:1d:56:13:
89:d1:0e:27:84:82:e0:2f:9c:dd:27:b1:56:ad:9e:
17:b8:7f:b0:09:2f:ae:43:3c:74:af:cf:4a:35:96:
d8:d3:3b:39:0c:3c:14:c5:df:0a:81:28:ec:e5:a8:
9c:58:7a:7a:55:7b:9b:df:66:0e:99:85:99:a2:52:
1e:7a:52:04:4b:85:1a:1e:b4:36:75:45:33:5e:54:
a0:a1:83:1d:fa:a8:1e:67:1f:ee:fd:fc:42:75:31:
56:f0:d6:f1:55:3c:3e:b4:b0:5a:c0:14:d0:d1:1d:
8d:a2:ad:cd:ca:06:f5:a4:ca:a4:60:c9:1c:c5:4a:
8f:f6:35:99:99:53:6b:c4:69:6b:3e:66:9a:fe:68:
cd:66:ba:d0:c6:5f:83:78:47:e4:99:dd:bb:b9:6a:
4b:ac:c4:ce:21:83:3a:9c:c3:3e:44:17:4f:be:a9:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:40:8A:D9:6C:84:79:15:4F:6B:AC:FC:29:ED:4F:46:8D:1E:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:8a:be:25:cd:d3:6a:b1:ac:26:5d:c6:17:87:8b:3b:97:ae:
cd:9d:60:98:5d:1a:f9:9d:90:aa:51:8f:1e:64:83:05:32:0f:
58:28:06:d8:79:90:74:69:f6:43:2d:5f:2e:26:5a:0d:40:82:
d1:d4:f4:4c:17:13:7a:1e:ae:36:8a:35:8c:b6:22:f9:83:db:
af:29:80:4f:f9:ed:cc:40:75:ba:73:e3:02:25:ec:af:2b:d0:
72:03:70:73:fe:2c:ba:ce:0c:e3:46:9b:ce:b9:4e:ca:88:23:
31:f7:b6:c1:27:ca:bf:6c:df:bb:d2:ec:90:9e:8d:01:4a:9a:
52:b9:41:ae:df:1a:bc:1b:05:f3:88:a4:eb:36:5d:5c:8e:60:
86:23:c7:57:75:96:bb:53:ee:fd:33:fa:13:3b:7f:bf:b2:78:
29:23:94:10:20:2c:b9:91:7b:49:1a:ff:ca:69:f8:d8:fa:c3:
4e:17:06:94:b0:c0:f4:79:e3:dd:ef:70:ce:56:c4:19:06:73:
75:e7:e6:19:61:83:0e:bf:72:72:35:66:62:bd:e1:f1:1d:85:
7b:00:7b:f9:8d:d5:2e:2d:bc:a0:39:99:6f:1f:4f:59:62:32:
2a:2d:60:8b:db:15:76:67:4b:16:cc:2b:82:25:fd:f9:72:30:
ee:b5:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:18:20 2025 by rpki-client