Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f75234f8-abd6-32b4-bbc5-0d94e7692b26.roa
File: f75234f8-abd6-32b4-bbc5-0d94e7692b26.roa (raw, json)
Hash identifier: k9urtn9z9L3bnlh9w9mi4fiT2+ZveafG0UpZdup7A2Y=
Subject key identifier: 1C:63:E6:42:18:19:2A:97:92:9C:D7:B0:65:49:09:AF:00:D7:25:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD4B6B7E27775CCDBAD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f75234f8-abd6-32b4-bbc5-0d94e7692b26.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396584
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d4:b6:b7:e2:77:75:cc:db:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=a91dcb81-009b-4b41-beee-57b7fda5f459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:5a:c6:0b:b6:26:80:0e:e5:86:76:71:fa:
b0:2e:2b:aa:b2:44:e2:e9:c9:93:7f:c6:79:df:38:
68:b9:0b:df:b7:26:04:e6:ef:4e:9e:d0:12:90:78:
9f:a6:df:17:fe:ce:6f:6b:13:77:96:21:7f:6f:a2:
e1:54:29:be:b0:59:14:f6:41:9b:cf:38:36:62:4a:
b1:c3:06:38:99:a5:aa:b1:22:12:d6:83:d3:4a:f2:
8f:0e:76:2f:26:5e:13:1c:bf:94:e1:3c:df:a8:38:
67:1f:95:1d:23:60:f3:3e:40:e9:23:58:56:e1:07:
cd:db:35:5a:73:94:38:87:ad:4a:77:e3:6b:90:52:
66:9e:80:6d:17:8a:07:90:6a:93:58:8a:83:df:ac:
8d:23:25:3d:e0:bb:40:52:9c:b5:e7:d7:01:be:f1:
60:31:bf:02:81:0c:b8:b9:df:08:be:46:11:92:90:
63:d3:3d:57:f7:29:b5:ff:0d:fd:f4:b2:63:49:04:
a9:22:6e:73:6c:46:7a:9d:53:00:2b:4f:9c:80:a1:
f8:2c:1d:47:0c:57:d1:a7:a0:e6:34:c8:9b:90:72:
6b:93:b1:4d:56:31:06:6f:83:0f:9b:55:f9:0c:0f:
5b:62:0c:59:0f:08:b2:58:5c:2a:27:a8:ed:a8:25:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:E6:42:18:19:2A:97:92:9C:D7:B0:65:49:09:AF:00:D7:25:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f75234f8-abd6-32b4-bbc5-0d94e7692b26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:b8:49:f1:3b:c9:87:54:bc:db:c3:73:6c:ca:a8:d7:b4:e0:
40:17:5a:13:8c:6a:07:ae:4e:91:af:b1:4d:6f:41:6f:ca:f0:
62:4f:98:80:fd:4c:3e:c4:81:2e:60:44:f3:d5:1f:23:bf:a7:
05:ec:ee:39:64:3e:f7:11:9a:41:94:30:05:11:63:d3:9d:45:
d7:4c:3b:84:d3:41:27:8c:70:2b:72:a2:f3:d8:ea:dd:da:fc:
4f:46:7c:d7:f1:29:31:8e:c6:f7:6c:d8:69:10:9e:ba:48:62:
f8:23:0e:f1:a2:75:7a:fc:a9:bc:5f:2f:8b:aa:22:6c:31:8c:
63:6a:76:2b:03:bd:bb:94:cc:06:a9:06:45:72:d1:5c:60:4b:
f0:83:e6:96:ca:34:f9:58:16:22:b7:61:9e:f6:1e:6b:0f:13:
dc:59:4c:56:42:0a:ea:2c:d0:d4:28:f9:03:63:33:67:31:fc:
df:c4:13:e5:6f:ad:37:4b:f9:51:ef:39:7a:dd:52:8f:5a:21:
5c:bf:c8:79:27:6d:b2:d4:60:3d:35:fa:50:60:ae:ca:60:5d:
ca:6e:a9:80:de:4f:16:f1:26:4c:e6:4c:5e:07:8a:5b:e9:bb:
9d:bc:ba:24:16:c7:ea:f2:1e:12:0e:da:d4:f8:0a:db:31:ed:
91:90:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:53 2025 by rpki-client