Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddd1f697-b12e-39c9-a498-8c0f61dc6934.roa
File: ddd1f697-b12e-39c9-a498-8c0f61dc6934.roa (raw, json)
Hash identifier: KkCmkceM3JJMLRLb3c+vAFavX2MoeZdgmaL5jKI96p8=
Subject key identifier: 0F:85:63:68:F3:BD:70:F6:E4:38:9D:F8:0C:7E:78:B7:84:58:9A:30
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157DCF37031C4E28EB7A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddd1f697-b12e-39c9-a498-8c0f61dc6934.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396612
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7d:cf:37:03:1c:4e:28:eb:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=0a31df01-2ebe-480e-a164-41e2f885aecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:0b:c6:66:3b:6e:51:3b:af:dc:09:92:12:
31:43:41:0b:2b:49:a8:5a:97:27:e6:cd:fa:1d:c5:
f4:53:04:cf:2c:7e:48:7e:0b:d2:d2:2d:04:e7:18:
7a:1b:fd:4d:c8:01:42:28:78:69:2a:b3:6d:98:62:
e5:b6:36:6d:46:0e:ac:f4:90:63:ef:bb:61:4e:85:
fc:b3:cc:fe:de:6f:f7:23:6f:e1:3a:81:4a:67:17:
3e:22:5d:93:20:08:9b:8c:06:11:fe:0d:fe:ea:b2:
f7:7d:58:37:18:3e:bf:e8:bd:37:5a:f7:48:95:fc:
4f:98:46:3b:44:2c:41:49:12:af:d7:50:dd:14:8e:
b2:31:a8:97:63:f1:e8:e2:97:f8:cd:a8:03:a8:68:
3c:32:0a:a5:38:1c:26:3a:d9:35:d4:d5:0b:49:bb:
7a:69:85:a7:12:0d:66:0e:6e:af:6b:3c:9e:cc:bc:
9c:67:1d:cc:c3:a6:93:01:ec:70:8f:05:7c:d1:8f:
62:80:19:59:80:a3:1e:48:cf:0f:53:5b:04:e8:d1:
19:25:62:1b:b7:13:6c:7a:82:dd:32:f9:53:d3:52:
63:cc:84:45:e8:86:91:18:f7:00:fc:5b:ca:90:ac:
49:11:d8:46:29:c0:5b:9f:ff:19:06:06:3c:1c:22:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:63:68:F3:BD:70:F6:E4:38:9D:F8:0C:7E:78:B7:84:58:9A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddd1f697-b12e-39c9-a498-8c0f61dc6934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:7f:13:85:8f:68:35:f3:07:88:69:40:6d:fb:f3:4b:95:3f:
d6:b3:a7:20:a1:fc:5f:35:39:6e:dd:ac:3e:04:a9:df:d4:7b:
c3:d7:df:12:e0:de:07:79:b3:2a:2a:ec:5c:c9:72:ec:16:8d:
10:88:75:ef:d7:87:57:47:ab:9c:86:c8:6d:2f:1f:b2:f0:df:
3d:3b:a0:98:61:47:5c:69:76:db:dd:e8:a0:65:ef:ce:c8:89:
96:28:15:9a:9e:fd:fa:c9:59:df:4a:da:9c:57:0f:dd:36:5d:
64:99:93:3a:b3:cc:82:73:df:a3:3d:56:04:d7:6b:7a:50:22:
93:fd:d1:03:0e:08:b6:25:4f:76:68:69:fb:42:07:ab:cd:ea:
e9:d5:35:78:1d:79:1c:e9:c5:e1:f5:be:90:a8:79:c7:9f:31:
4b:e2:16:88:e2:d6:fa:41:c7:1a:5e:e8:32:1c:7d:c3:1b:ce:
17:fe:75:3f:41:b3:e1:06:69:03:5c:13:e1:6a:1f:41:53:fe:
6e:e0:18:8d:96:69:eb:70:3a:82:0c:9d:fa:95:ce:1d:5c:76:
dd:3e:fb:cc:a5:a4:dc:40:db:68:4a:8d:02:a9:6a:83:2a:3c:
29:18:64:c0:c7:87:0a:7a:22:26:34:eb:0d:4f:60:7d:d5:1b:
18:9d:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:00 2025 by rpki-client