Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
File: f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa (raw, json)
Hash identifier: HqVKN8Y4SrFacr7AuWkuPoZ9+bINvzCfDQChU3gt9ac=
Subject key identifier: A9:7A:DB:75:EC:96:D9:81:68:AC:66:A4:8D:59:4B:C5:73:A0:C4:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A04DB3FE1345D25845C580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 36631
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4d:b3:fe:13:45:d2:58:45:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=97ce67e6-2f8e-4747-9060-0578dbcefc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:8d:b4:d3:c9:55:1e:fe:33:13:8b:2c:69:
81:b7:99:f3:79:a7:7d:f5:29:a9:4b:f9:a9:4d:a2:
f4:8f:61:da:d5:81:b6:24:28:f6:c0:5a:7e:6c:c2:
f1:56:13:55:61:0c:fb:87:d5:ed:bc:c3:25:87:23:
b3:16:20:9c:5a:cc:f0:db:26:a7:e0:8e:77:9a:cc:
7b:9b:23:46:5b:57:1d:de:34:04:3b:c2:47:7c:d2:
b1:72:75:ca:da:b1:cd:ee:64:78:72:06:28:33:f8:
e2:08:6b:1b:ce:1e:6f:d8:78:ad:ab:59:07:e9:6d:
23:52:87:c2:69:03:05:65:e8:52:c5:07:25:2a:01:
e8:6b:fc:e1:2b:94:29:68:9a:e1:21:1f:25:7a:93:
f6:d6:f3:0c:f3:bf:a9:2d:59:1c:74:ee:9b:13:8d:
f2:9a:18:0b:bb:09:65:5b:44:48:73:75:5e:b3:3d:
37:94:71:04:0e:c3:75:2c:50:15:34:ad:da:da:27:
a9:35:4f:2f:53:f8:c0:c4:b8:36:51:ae:43:ab:0b:
66:8c:4a:7d:2a:45:aa:92:b3:ba:f8:e1:6b:00:c2:
c6:00:4b:54:83:e9:6f:e4:58:47:32:0c:b6:ca:45:
5e:af:7f:1f:04:06:ba:5f:b2:83:ad:23:8c:f7:21:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:DB:75:EC:96:D9:81:68:AC:66:A4:8D:59:4B:C5:73:A0:C4:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:02:99:0d:f4:30:24:81:c9:87:8a:99:35:3f:49:6a:80:c2:
a1:43:28:df:f5:38:a2:9c:f1:0d:f7:05:31:37:b1:a8:b9:77:
18:6f:14:8b:47:11:4f:76:fc:5e:52:93:dc:fb:2f:09:8c:4d:
a5:6c:14:58:fe:87:8a:8b:0d:e0:4b:10:8c:29:7f:ad:0e:f6:
c4:2a:76:f4:a3:33:67:b9:75:10:52:1d:45:68:6b:dc:ef:ee:
30:e7:12:12:0e:2b:df:34:dd:f1:c6:64:fb:a5:7c:f3:a9:e9:
80:71:cc:b1:e8:4e:f8:f9:3b:08:b8:63:ef:f8:90:79:cd:40:
3f:0a:f3:4c:fa:b2:79:d9:df:41:e0:ae:84:74:7d:2b:79:d4:
8c:26:20:db:d3:e7:a0:17:c5:fd:7e:a1:85:73:83:aa:a5:f7:
ec:d6:d7:1d:f5:38:c4:43:17:39:bb:d7:c8:6e:a6:61:59:3e:
91:04:84:d0:0e:54:82:e0:e0:a5:39:65:9d:b7:8a:3b:99:d4:
da:00:cb:60:db:a6:ab:51:75:36:69:b0:5e:ab:e7:64:ab:73:
22:db:86:db:1b:cf:07:96:26:a6:9e:d2:d0:1f:92:e1:29:b6:
ae:f4:ac:d2:3c:0f:5f:76:f4:35:7b:8f:00:e1:4d:e5:e4:30:
64:53:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:33 2025 by rpki-client