Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daa185e6-4b08-36ec-8481-f6890b66cebb.roa
File: daa185e6-4b08-36ec-8481-f6890b66cebb.roa (raw, json)
Hash identifier: 8Cw+UkXtxH2IjF2oG48t/MAGJ/UlxucWqv7jcisxoTw=
Subject key identifier: 18:53:16:E7:12:05:81:63:50:3F:4F:F5:84:EA:44:76:DC:FE:66:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A047FAB80E4DB31A470C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daa185e6-4b08-36ec-8481-f6890b66cebb.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 396600
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:47:fa:b8:0e:4d:b3:1a:47:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=9149a9f3-54cf-447b-bd63-f5e215846c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:47:15:5d:a3:db:f3:cf:f9:a4:56:9f:04:c4:
c4:a7:d9:be:d8:13:b3:c3:d7:97:c6:58:54:ad:f6:
3f:00:2c:29:c8:ab:0f:9b:ae:47:ae:eb:76:61:e2:
17:a8:f8:a5:ce:66:8b:3d:f0:e8:8e:67:8c:d0:a5:
ee:01:a0:66:5d:0d:7e:0f:75:89:45:21:bb:ec:7d:
3a:7e:8b:c6:46:fc:e4:05:23:f6:71:32:89:f4:bc:
af:a2:6f:fc:2b:cf:1b:eb:df:5b:7d:f1:30:42:4a:
07:e8:8b:b7:b6:a3:09:a7:1e:ee:3d:93:86:59:b3:
9d:46:2c:c6:77:a5:44:1a:34:ae:07:bc:2d:3d:cb:
1b:3a:d3:36:85:be:af:0a:17:c9:74:c1:14:3a:e5:
fc:2b:d9:5e:d0:dd:e9:43:7d:03:13:38:65:ac:5f:
5b:af:3b:2b:ac:f0:1f:33:21:2c:10:9c:36:ce:05:
2f:ec:e3:38:fb:56:5f:e9:ee:9b:77:59:e5:81:1d:
9a:7c:95:ad:8d:4e:53:a2:de:f5:79:67:72:26:17:
9d:67:05:55:29:80:83:27:c6:3b:07:bb:aa:ef:f9:
1b:de:0a:54:83:e2:22:e4:01:f9:cb:8d:b7:dd:19:
fd:82:ed:55:02:bb:69:94:95:0a:07:f2:12:45:10:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:16:E7:12:05:81:63:50:3F:4F:F5:84:EA:44:76:DC:FE:66:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daa185e6-4b08-36ec-8481-f6890b66cebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d4:44:f1:b5:d7:b0:96:13:6b:4e:e3:b7:ed:a8:28:e7:42:
f7:97:de:d8:e5:8e:34:c7:eb:fd:7b:42:96:f9:32:0a:fc:bd:
ca:27:0c:35:fc:cc:d3:92:b0:e0:f5:a1:97:30:f3:e3:a4:4b:
69:1b:87:35:49:61:11:95:6c:f3:57:5f:a9:df:a1:f9:61:08:
01:62:32:74:59:6f:d7:67:ad:54:2c:33:a0:8d:ef:e2:22:f9:
a3:77:5b:2f:45:9d:30:39:f6:46:2a:0d:b0:f5:fa:53:2e:a4:
d1:9a:a8:79:57:2a:e0:69:bc:1e:ef:ed:ca:20:e5:dd:ff:1d:
42:49:39:b4:e7:21:22:70:b3:b4:08:98:25:dc:9c:a7:f7:f0:
b7:66:83:cf:d3:16:8c:92:91:b3:18:06:6e:b1:10:fb:92:9e:
ec:d0:bd:fa:14:68:2e:64:09:ab:bf:b8:b8:8c:ea:7d:08:6d:
4c:bb:a6:b7:07:b2:46:5d:0b:9d:7d:2d:42:0b:34:ec:a0:e0:
df:f8:38:b4:70:65:18:92:f3:9b:28:e1:fb:29:e3:b6:bd:2a:
7d:a4:9a:cd:ff:72:be:a5:f1:37:8a:cf:70:3d:23:88:b0:b7:
f9:c3:e3:8f:8e:85:97:c9:ca:6c:1d:90:c5:99:f3:99:53:ad:
d9:74:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:33 2025 by rpki-client