Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ad9285-456d-3caf-b9df-967edaa16822.roa
File: d0ad9285-456d-3caf-b9df-967edaa16822.roa (raw, json)
Hash identifier: zl92Dx3E2FJbqaNAMHw9UlK2YNmdlCU4v5QNDhLBTjQ=
Subject key identifier: A7:33:97:D9:CD:A4:F2:A5:EA:1B:55:9D:A5:A1:23:3C:25:4D:60:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157F0BCE2A45DD948F3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ad9285-456d-3caf-b9df-967edaa16822.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 20431
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7f:0b:ce:2a:45:dd:94:8f:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=0fc6843c-bbb4-4414-9044-78d0d8c44303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:9a:c5:5d:29:56:96:c8:a1:85:90:30:99:
3c:47:4f:7c:38:16:43:e7:a1:31:27:bc:c7:b3:b8:
52:f9:04:08:17:f6:75:5a:52:b8:fd:c8:cd:aa:83:
5d:4b:d8:11:93:40:5c:4b:d6:bd:9f:5a:c6:41:49:
81:dc:56:b4:fa:39:23:25:c2:5f:bc:46:52:4b:3d:
ea:5c:4d:ad:34:28:e4:8a:5b:d5:32:7c:ff:fa:66:
89:a5:66:d9:ab:35:00:09:7b:c5:bc:b8:fa:ab:61:
30:92:e7:0f:73:03:13:20:94:45:b4:de:89:26:bb:
75:d7:cc:f0:9c:31:e1:12:05:a8:8a:0b:78:6d:16:
5d:01:6e:26:27:5c:a3:3c:03:87:19:4a:56:dd:5e:
71:4d:34:02:e1:9b:ec:0d:34:8f:ef:34:32:2a:76:
73:b7:3e:c8:8e:c6:1c:c7:94:91:9a:3a:3c:97:99:
8e:ec:f7:40:c5:72:84:fa:1e:b9:b7:28:e8:9b:53:
e7:d4:9b:a3:50:b1:84:89:c0:f7:f0:d4:1b:47:d3:
ac:28:01:28:a1:e9:d5:24:93:a9:8e:d2:26:12:5a:
67:87:1b:95:dd:1d:b1:49:3f:fe:21:88:21:36:d3:
58:bb:3a:ae:04:b1:c8:3c:32:0c:9c:dc:cd:0f:f8:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:97:D9:CD:A4:F2:A5:EA:1B:55:9D:A5:A1:23:3C:25:4D:60:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ad9285-456d-3caf-b9df-967edaa16822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:00:d3:aa:65:5a:46:2d:40:cd:f8:fe:3f:b4:36:64:c7:1e:
0f:ea:84:6c:43:6b:59:32:9f:e4:64:39:19:93:81:c6:0f:06:
0e:11:61:54:23:ad:0c:b1:f5:d0:8e:74:83:65:be:b6:9b:3a:
81:d9:82:ce:c3:68:ad:05:5c:43:e1:a4:a8:7c:08:7c:24:0d:
9e:64:53:f0:48:60:23:76:a6:63:9e:f1:6d:7e:67:18:e9:65:
e9:97:02:fd:8a:90:22:0e:f5:19:24:24:da:07:41:cd:21:f0:
a0:fe:0d:e9:5a:61:7e:a3:a3:1e:ee:df:cb:a4:6e:c9:5a:3d:
a5:28:a9:08:55:33:99:83:ad:41:6f:d9:95:63:15:15:da:3e:
2e:17:74:19:a1:48:18:83:ae:82:f0:d5:6b:54:a1:cb:74:5d:
5f:40:91:30:f7:e0:0d:d7:76:6c:6a:1a:45:ac:f4:b3:95:39:
cf:92:79:b6:3e:c7:4f:5e:55:ab:c8:3b:ce:9f:91:c4:7f:0a:
3d:51:f3:0b:dd:7f:31:be:fa:c3:da:0f:e4:45:56:65:33:b0:
77:84:b4:8a:b0:d9:5a:c4:c4:9f:d7:1e:31:a2:33:24:83:bf:
b1:bb:40:04:2a:8b:a3:cb:88:8f:da:8b:d0:ac:57:be:0c:03:
76:09:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:20 2025 by rpki-client