Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb42a8e9-4e1b-3451-9400-3132aecafc81.roa
File: bb42a8e9-4e1b-3451-9400-3132aecafc81.roa (raw, json)
Hash identifier: UwCZGxHP9i39eXMdaRxxXLgHaGZ9cg7belGtTMnEdU8=
Subject key identifier: C0:83:AD:9C:FA:E9:BF:40:9A:B9:E8:98:D4:37:C3:9E:9C:3F:6F:F0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530AFE5ABC8CDA6FE1CD7B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb42a8e9-4e1b-3451-9400-3132aecafc81.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396614
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fe:5a:bc:8c:da:6f:e1:cd:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=74f1dfee-69ca-4d61-aaa7-e9f0efae1c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:42:50:61:38:f9:96:f6:56:40:bf:e8:ca:
55:61:ad:72:68:ee:01:93:56:96:ad:5d:d6:df:ae:
f9:eb:36:d5:5c:0a:2a:63:7a:42:9c:d6:61:e0:06:
a2:8e:f7:05:d1:2a:22:36:aa:a7:4c:63:d9:88:13:
a4:f3:ac:11:62:58:ee:27:22:f1:76:3c:72:69:37:
52:b6:b5:05:87:6d:08:18:6e:15:95:de:d4:4e:90:
d3:15:b2:5c:3a:a7:9b:8f:7e:69:3f:cf:60:fc:9a:
42:35:8a:2e:8e:2c:76:e2:4e:89:31:c9:fe:3d:5e:
7f:b4:2a:57:26:47:b8:d6:df:1e:5e:5c:ca:1f:e2:
45:11:17:7b:74:18:5c:ac:57:67:23:f9:4c:f8:61:
5b:dc:62:9c:b8:2e:cf:99:55:b6:f3:fa:4b:15:46:
22:6c:47:a0:c4:b1:94:fc:63:f8:7c:02:7b:b3:e0:
c3:7e:4b:49:6d:f2:5b:83:3f:0a:fc:c3:ad:a9:b8:
51:35:d1:0f:ae:c4:fc:7d:54:bb:8f:84:8b:17:85:
b0:f6:07:d6:9c:b1:19:dc:3a:0c:ef:32:c2:c5:b1:
5c:24:ff:5c:b2:cf:3a:43:1d:73:6b:6a:8f:0f:44:
a6:e5:13:46:80:28:4a:49:88:40:ed:a0:6f:dc:f3:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:AD:9C:FA:E9:BF:40:9A:B9:E8:98:D4:37:C3:9E:9C:3F:6F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb42a8e9-4e1b-3451-9400-3132aecafc81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:29:5e:79:40:50:41:2a:76:d8:8f:7d:09:e2:5a:cd:87:6a:
b5:2b:4c:4b:59:4f:f9:c5:13:e2:23:1f:f4:31:06:b7:f2:45:
39:46:2f:2e:f5:37:3d:a8:ef:70:bc:eb:aa:4f:65:f0:91:13:
9d:15:d9:54:ba:ab:40:4e:d4:00:9a:5b:88:1c:06:67:ff:a3:
b9:d7:2e:23:07:58:1c:a6:cd:29:55:79:77:d1:f5:3c:e6:5f:
fb:40:5c:26:30:73:63:14:01:cb:e5:43:e8:c4:84:10:ff:2f:
57:e9:4f:4e:91:fe:35:00:02:cc:28:9c:06:db:83:2e:13:54:
27:6c:38:d0:4b:ca:60:34:f5:1c:7f:25:37:fd:bf:a1:41:d1:
24:f9:26:c7:65:48:97:ac:fb:56:1b:6f:90:1a:5c:cc:0a:d5:
f5:c7:b1:db:a9:9b:40:68:37:50:99:14:ea:f6:44:05:29:0b:
22:57:85:39:55:84:1f:b2:54:c8:b2:be:f7:20:c5:ba:39:76:
a2:47:e0:d7:1e:e8:30:89:7d:99:41:26:97:12:0d:4a:ca:0a:
8f:23:94:cd:a4:8e:a0:f4:93:f5:e0:8e:57:18:b6:03:4f:b5:
e2:2e:10:14:87:be:c5:46:16:94:45:9a:d6:b1:79:f0:47:8e:
9e:ca:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:10 2025 by rpki-client