Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa
File: d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa (raw, json)
Hash identifier: o3XqWw0a2CgK5qdRDfS7Jqn5Zr2VpEk/uf+pMhsea/4=
Subject key identifier: 72:86:A5:0E:CF:FD:1A:3E:E9:72:E3:23:C7:83:F0:B6:76:64:BF:00
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A04D234883319F07FC9900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 397198
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4d:23:48:83:31:9f:07:fc:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=e3178f3d-dee2-4a60-aae0-af02b53efbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:78:b9:76:0a:56:ff:14:18:1a:24:8f:60:
40:37:23:a6:1b:14:7d:bf:8c:0a:bb:a2:45:f1:58:
ec:33:6f:6a:03:d7:b1:92:57:2b:91:d6:73:c2:0a:
b2:75:a0:f1:84:55:b2:e1:55:d4:63:f0:28:40:58:
7f:cc:3c:7f:52:70:cd:a6:c6:2f:dd:52:f6:68:b4:
e5:bb:4a:3b:0d:fa:58:bd:7c:b4:e0:1e:1d:7e:a5:
17:a9:2c:a2:16:85:95:8f:20:4b:d0:1d:f4:35:85:
1c:33:9d:af:b8:bf:f3:24:0f:1e:40:fd:5f:98:f1:
1f:f2:9f:90:98:b6:1e:f8:55:48:91:25:a0:21:17:
bd:74:2d:30:b6:d4:6e:e2:99:03:c6:a1:ef:ae:8d:
af:6a:19:9e:64:22:e8:5d:1a:76:31:94:ca:cd:04:
ca:8f:4d:f1:66:2e:78:74:01:fe:ca:5e:da:1f:8e:
16:e7:b3:53:e5:fd:15:6c:d9:cb:95:ea:c1:fc:76:
a0:7c:9b:ac:39:b2:94:3b:36:d3:06:cd:48:c5:b2:
f8:ed:07:d9:49:b1:b3:02:f6:09:58:4b:9d:77:fe:
4f:74:56:f0:d4:a3:ae:e8:fe:57:cb:d1:7c:7a:c6:
81:18:3b:d8:e4:b9:1e:fb:28:31:23:31:da:ff:f0:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:A5:0E:CF:FD:1A:3E:E9:72:E3:23:C7:83:F0:B6:76:64:BF:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f0:67:36:c2:92:1b:a8:8c:3c:e4:ff:19:b2:8f:30:1b:24:
d1:5a:44:c2:66:d6:9a:c9:25:3c:37:35:1b:51:a0:4e:a4:cc:
4c:5a:98:2f:a7:7e:a1:0c:86:8c:8b:12:22:01:aa:e7:d8:78:
08:4e:cb:ab:db:9e:96:b2:95:ef:38:f6:d5:58:43:f3:b6:c9:
8c:d3:6a:fb:5f:df:4f:59:25:71:33:c1:e4:e2:57:35:b9:c9:
94:6e:36:20:b2:89:1e:25:b4:85:1c:6f:d0:2b:43:11:20:be:
4a:05:4d:23:6b:88:27:c8:01:82:54:d2:8b:79:a4:ef:9c:0d:
07:77:9f:88:bd:4d:ab:3d:fc:ef:65:77:40:11:8e:46:22:26:
fe:dc:e7:85:18:a6:60:ae:cb:6a:b3:57:c9:ce:0d:0d:b4:1f:
4b:04:66:3f:37:5b:cb:22:6f:6d:26:c9:bc:70:33:ef:90:0a:
9f:83:9e:83:c8:16:23:ce:ef:11:77:f4:2d:6f:19:4e:0f:63:
8a:cc:49:e6:ee:77:1e:72:84:b7:93:75:83:43:16:ca:70:d6:
4c:48:09:d2:cb:05:ad:e5:8b:3e:74:8c:33:4b:48:26:41:01:
4f:9f:3b:1b:45:1a:57:b6:19:70:3b:a1:f7:38:d3:ac:7b:23:
df:ce:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:41 2025 by rpki-client