Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf40fbb8-4be1-3ba2-b0eb-f90a52777cd6.roa
File: cf40fbb8-4be1-3ba2-b0eb-f90a52777cd6.roa (raw, json)
Hash identifier: VhKyPYJ14ZLJHZe4BzrzFFXilSuSyMRBpaxm6evVW6c=
Subject key identifier: 48:A9:30:81:07:C3:EE:E1:88:8D:CF:30:2F:7A:F0:83:3F:83:6E:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530AFE4CA42BDE02EAF55E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf40fbb8-4be1-3ba2-b0eb-f90a52777cd6.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396617
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fe:4c:a4:2b:de:02:ea:f5:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=c6047bc4-7f9e-41e0-ad67-26c8ee31c6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:0a:b3:20:01:43:14:ab:c9:58:40:76:f9:
a3:a0:83:95:7b:50:52:04:44:79:a8:61:9c:8c:a4:
e5:37:13:f2:b5:4e:ee:c0:bf:dc:05:38:b7:0e:e2:
9f:d0:8e:ee:79:7e:5d:d5:41:a0:21:11:f9:ca:cc:
2b:53:49:09:f7:f7:e7:ec:91:a7:83:02:2f:6b:9f:
36:fc:a7:8b:bf:75:d0:4d:76:08:41:2e:92:58:4e:
3c:14:85:0b:6a:36:0b:cf:aa:a7:2c:ab:05:2c:80:
a8:59:82:0c:72:4b:42:fc:b6:4a:52:8b:49:42:55:
ba:32:fa:30:3a:ce:8c:6c:3a:3c:3d:36:d3:d1:e8:
63:76:2b:3c:b5:a6:41:bb:a1:8b:d4:7b:71:15:e0:
58:fd:ff:8c:80:74:ea:ec:94:03:9d:31:b3:e6:bc:
f8:e2:33:eb:3f:49:50:0e:89:8d:55:2d:8a:5a:cc:
f8:5e:f4:28:61:a6:ef:8d:93:bd:79:d1:30:23:92:
02:a0:1e:93:7d:de:3a:0b:90:4e:fa:7c:95:2d:be:
9d:e0:e2:75:2d:50:40:50:b9:cf:28:da:b9:0e:59:
73:70:b2:99:9b:d5:0c:3e:a0:b7:48:58:7f:22:ca:
0b:b0:93:c3:12:1e:8a:1e:fb:c3:61:1a:98:65:c5:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:30:81:07:C3:EE:E1:88:8D:CF:30:2F:7A:F0:83:3F:83:6E:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf40fbb8-4be1-3ba2-b0eb-f90a52777cd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d3:d8:a8:43:9e:da:86:0e:e4:7b:56:f1:57:4b:95:c2:21:
04:a0:f2:73:97:7a:fa:0a:2a:89:93:38:87:ae:9f:b3:e5:60:
79:66:17:9d:6c:cb:60:c3:3b:35:c8:8d:81:d2:87:7f:ac:9a:
6d:a4:dd:c5:35:c6:72:15:71:cd:a9:c0:72:18:6e:a3:f6:e1:
a2:7c:51:8f:cf:17:11:94:63:83:00:6a:5c:a1:4a:41:73:8b:
87:2b:9a:f7:3e:73:ae:b1:aa:81:c6:29:70:c2:c4:07:e6:36:
e4:9a:9c:f1:28:6c:ee:4b:8c:97:b1:d0:f9:7c:f9:39:ca:58:
53:fc:ad:2a:38:e2:bb:c8:24:6b:59:7d:f5:e3:0e:ba:b5:98:
cf:1c:74:07:ab:05:29:5f:34:91:bb:35:3c:e5:de:e3:34:32:
9e:02:cb:ae:78:d5:05:cb:e0:80:67:ca:aa:72:40:a0:f8:1f:
e4:fe:fc:09:75:16:9f:74:a1:48:b7:7b:e5:61:b7:71:05:4f:
35:11:05:55:06:ea:2f:67:bb:cf:f4:d0:3c:e2:94:0f:0f:5b:
d4:37:2a:d6:2e:d5:4a:7c:2a:87:ba:6c:05:a6:d1:b8:55:b2:
ee:47:57:b2:01:72:24:46:1e:87:f3:2d:ae:f5:43:94:18:3d:
7a:a6:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:18 2025 by rpki-client