Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb53cb99-948a-3d10-a8d7-ee148d0c5a6a.roa
File: cb53cb99-948a-3d10-a8d7-ee148d0c5a6a.roa (raw, json)
Hash identifier: /p6u4CXmvnf53W53NVNK9uIaKmcAK4aKgWwIIpOmqwI=
Subject key identifier: CF:DB:C4:BD:64:7F:33:52:D1:CE:F7:C0:42:DF:1C:68:62:57:F7:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372010CE3082EC7AC1567340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb53cb99-948a-3d10-a8d7-ee148d0c5a6a.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396558
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:10:ce:30:82:ec:7a:c1:56:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=f2619330-9f21-48ff-a166-965c13b831f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:cb:d7:b6:aa:78:14:38:d3:db:ef:80:ef:
64:b6:cd:b3:c4:69:f2:13:34:f1:50:8d:15:20:c1:
86:c6:78:25:89:94:30:3c:06:bb:3b:3f:b3:51:28:
7f:fc:47:e7:1e:e0:a2:4a:ea:6a:4b:50:28:8e:33:
bc:7c:9f:f2:ba:ca:11:67:78:76:f1:e7:51:aa:53:
9e:1a:58:d3:21:20:ab:91:95:8c:19:7b:45:07:fc:
3c:17:a0:5b:e5:5a:0a:6c:1c:86:72:e8:bf:32:52:
08:9f:d5:15:80:3b:fa:42:06:86:7c:0d:0a:e6:c6:
7f:fb:03:fc:8c:8e:f9:88:03:9a:db:18:4d:61:7c:
8d:54:7a:00:b6:5d:66:ef:bd:2f:92:29:78:fb:cd:
96:6c:e1:bb:0b:9e:0b:a2:2f:f9:0d:3d:5c:cc:2a:
2d:0e:86:23:02:42:33:12:5c:03:37:8b:e1:db:74:
d5:4f:be:6a:45:51:68:d6:d6:fc:b4:95:cd:6d:09:
df:db:bb:cd:58:65:50:67:c3:89:2f:db:c5:30:79:
47:6c:d7:72:38:94:10:70:fe:e2:15:bc:70:e1:c6:
65:4c:37:32:87:3b:a2:f4:c0:43:b5:0e:e4:9a:22:
9e:c1:e9:b4:80:4b:54:46:e7:da:a2:a4:72:7f:98:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:C4:BD:64:7F:33:52:D1:CE:F7:C0:42:DF:1C:68:62:57:F7:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb53cb99-948a-3d10-a8d7-ee148d0c5a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:17:65:4a:f6:32:9a:92:fa:81:ff:02:1f:43:c5:22:02:34:
74:bf:e1:49:99:31:67:bd:5f:b3:04:be:89:f7:c1:79:6d:0c:
c4:7b:2e:c5:1f:7d:07:07:07:64:0f:d5:e0:a4:a0:c7:f3:a3:
d2:a4:69:58:c6:45:61:d7:0d:36:e9:f5:0e:89:57:28:99:cf:
97:1a:fd:80:c8:9b:d1:35:63:75:53:7d:b2:03:1e:33:d6:83:
ff:85:28:29:47:46:22:3b:e4:a2:78:e9:a6:4a:31:0b:b6:2b:
2b:82:71:65:d0:31:10:2e:5f:a5:05:00:44:93:7b:8e:9f:ae:
23:3f:74:4d:ea:0b:8e:4a:51:ef:6d:1e:1f:f7:7d:68:0b:96:
05:ce:84:75:8f:89:89:2b:4a:c3:bd:21:6b:ee:58:1e:a2:f0:
1f:39:80:6d:5c:a8:79:34:42:1e:cb:84:47:23:95:8e:f2:9e:
9e:14:fa:77:69:69:10:c1:23:1e:35:02:31:a9:54:ce:15:fb:
d4:8e:a7:89:84:c5:3d:ad:97:16:1c:8b:72:76:1c:8e:f4:6d:
e1:98:c6:20:80:27:01:d6:e8:83:4e:22:13:8a:03:c4:63:7e:
9a:f5:44:53:bc:1f:7a:7d:4a:10:81:2d:9b:c9:6c:f9:b5:94:
70:5b:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:20 2025 by rpki-client