Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e63c78a3-a430-3841-8019-20a978510221.roa
File: e63c78a3-a430-3841-8019-20a978510221.roa (raw, json)
Hash identifier: DxUZxxP123np9/lECW59MYk2EERXXKI5fBr9dcwlLCc=
Subject key identifier: 39:6B:FC:1B:C0:F6:D6:EA:1C:5D:F6:E3:8E:4C:57:A9:8C:19:9A:2F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAADBD87A73461A56AA5910
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e63c78a3-a430-3841-8019-20a978510221.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 25485
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:db:d8:7a:73:46:1a:56:aa:59:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=6c28053a-2151-481b-b7b6-e17028537e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:d3:4e:1e:e2:3c:52:7a:c3:c7:e7:dd:19:
5c:85:65:1e:54:57:b0:1f:0f:04:6b:31:9a:24:21:
f6:b0:6a:e9:bf:38:54:37:55:31:6a:5c:e5:e6:83:
9a:7d:58:f7:27:dc:a8:ed:8b:70:76:d4:ea:45:ca:
21:13:99:1d:17:f5:c8:ce:45:90:f9:75:a3:25:54:
af:c4:5d:88:e7:15:e9:28:43:32:a0:d6:79:a5:18:
6d:7e:b7:21:2d:3f:1e:c6:35:4c:3d:b1:bf:cd:e7:
ee:8a:cd:51:8d:d3:a5:58:28:42:9b:91:cf:b4:49:
1b:1d:af:25:d6:df:2d:63:99:cb:33:39:a6:02:3e:
c3:01:7d:94:2e:16:67:d0:07:9c:0d:32:2c:46:aa:
29:8e:08:18:ac:e8:8e:b8:00:97:0a:82:95:4c:b5:
16:11:cc:a2:52:d6:d7:53:2a:96:e8:8d:31:17:34:
6a:1f:f9:40:96:16:69:78:f6:9e:dd:86:06:de:c7:
3c:9c:d0:95:da:cc:a6:96:c8:45:c8:b6:35:7b:95:
23:e8:15:7d:72:7b:c8:21:d4:53:fd:69:b8:71:a0:
5e:5f:cd:84:26:a4:19:75:01:08:e7:0b:5f:e9:a9:
02:d6:a4:c3:e4:42:e7:c3:77:f1:9d:be:56:a7:2a:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6B:FC:1B:C0:F6:D6:EA:1C:5D:F6:E3:8E:4C:57:A9:8C:19:9A:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e63c78a3-a430-3841-8019-20a978510221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f4:91:27:28:59:b1:c6:ca:11:0b:68:f1:1a:39:6b:7e:48:
e0:cb:b2:d2:f7:da:ef:7a:8a:1c:7f:60:84:42:2e:f3:6d:0a:
a2:a1:6d:87:83:50:2c:81:fc:a8:b7:14:94:c2:2e:fb:fc:80:
ae:0c:6d:c9:a7:96:27:3b:ba:41:dc:c4:1a:78:f6:fa:c0:ad:
ab:7b:1c:b3:89:9b:7e:e6:ff:48:a2:54:0b:31:a2:2a:c2:65:
22:52:1a:37:b0:c4:cb:54:c9:5f:7f:3e:4a:9e:a5:3d:7b:a3:
2d:fe:35:bc:3d:ae:ae:47:19:0f:97:35:5d:77:7a:08:c6:7f:
1c:51:c5:3f:ef:05:01:a7:be:76:bd:75:a3:8d:5f:b8:d1:cd:
30:73:29:12:f5:90:8b:7d:d2:cf:00:58:e4:bb:c6:49:c3:13:
fc:0a:af:af:f1:da:86:31:2b:2b:c9:69:1a:eb:a4:d1:da:d8:
39:59:07:c5:da:cc:d2:19:e6:67:69:6e:12:c6:10:09:95:8f:
dd:cf:a6:d5:b7:59:f3:2c:81:a0:e1:2e:a8:29:ab:f1:bf:a5:
2d:5e:94:2b:30:ae:2a:b4:6e:7a:9c:07:be:f2:79:6b:9a:70:
07:ce:cd:9e:15:12:e7:47:a3:ae:d8:22:fb:39:76:00:dc:39:
30:69:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:05 2025 by rpki-client