Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5cec1c-ffce-3486-839b-c1b9c2ea26e6.roa
File: ff5cec1c-ffce-3486-839b-c1b9c2ea26e6.roa (raw, json)
Hash identifier: ANFlMjh61L9xWsciPgMa7HUXx8DwZydpDOmOjJO459k=
Subject key identifier: E5:7D:0E:C9:86:E5:DC:A2:D7:40:70:F9:7A:51:1D:7F:D0:CA:A8:35
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB77B70F50D8145AC58580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5cec1c-ffce-3486-839b-c1b9c2ea26e6.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396553
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:77:b7:0f:50:d8:14:5a:c5:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=35b7e75d-0089-4683-9483-9e7462c068e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:4d:02:f8:02:a7:9e:06:1b:e7:e6:06:30:
a9:1f:e0:21:ab:30:31:d9:2f:b4:51:55:c5:46:39:
0a:92:42:e0:a0:f4:01:2c:78:8f:bd:b9:ac:6f:8a:
15:53:44:5d:e7:20:41:44:df:4f:ae:a3:98:46:61:
07:89:a7:a8:61:e5:9c:c8:2f:17:61:4d:06:44:af:
a2:7a:62:4f:ff:b8:ce:67:c7:f9:0e:65:e5:78:f0:
82:81:3f:3e:26:b0:22:d5:2c:87:29:d4:d6:f7:92:
8a:dc:bc:d3:ba:64:00:fd:ec:fb:a3:9c:bd:d7:f1:
10:ff:2a:a2:0a:2f:1b:df:ea:7b:21:5c:47:c2:9c:
aa:ec:15:b0:80:d2:8f:4d:5c:ec:d1:af:3a:42:ec:
0f:f6:f1:d5:89:65:bd:bc:ba:a7:d9:41:88:ed:f1:
db:16:2f:96:af:bc:73:4d:f9:05:94:5c:f6:ec:3c:
94:02:96:85:cf:3a:c0:d1:f4:63:a9:02:bd:53:77:
04:fe:c2:80:06:58:0c:f3:ae:5c:74:e7:d6:6a:4f:
56:18:27:79:0d:85:b1:8c:a9:6d:16:ff:92:89:bd:
38:6d:ae:70:1a:10:39:cb:a3:6b:01:85:5d:3a:d3:
44:81:87:b3:be:f0:41:7d:3f:cb:66:94:b2:c5:c8:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:0E:C9:86:E5:DC:A2:D7:40:70:F9:7A:51:1D:7F:D0:CA:A8:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5cec1c-ffce-3486-839b-c1b9c2ea26e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:57:fd:3c:cc:56:5f:86:96:79:6e:73:5b:15:bf:88:7b:a4:
28:4c:85:dc:12:c3:d7:c1:ae:68:c5:75:25:06:e3:0f:ba:0b:
1d:0b:7b:9e:ae:9e:db:60:2e:e0:0c:b8:63:16:01:f7:df:7d:
6f:ee:ae:4a:43:f6:0c:74:6c:36:7d:3d:f2:12:64:ff:93:eb:
49:e0:33:f6:61:e6:84:9f:b0:f4:b0:17:4b:c6:96:2a:e0:e8:
33:27:9f:db:1f:2a:a1:fa:d9:eb:23:4d:27:19:6d:42:1d:da:
05:bd:a1:d9:a3:9d:29:44:a5:61:99:15:22:1e:81:2b:c9:ca:
8d:09:6e:7b:04:24:b0:7b:ac:62:af:eb:1e:13:d8:b9:80:bd:
01:da:f6:d2:22:b4:44:15:bb:63:f5:04:d6:74:4c:ed:b4:a1:
25:2c:de:86:6b:d7:7b:67:cd:a4:e2:0c:ae:ef:9e:63:05:0d:
05:1d:ad:ea:8e:eb:2f:ab:5e:b4:00:9a:1d:fa:94:0b:51:63:
d8:42:6e:01:73:34:ea:91:1f:e5:31:7e:87:1b:49:8a:42:30:
3c:09:db:1f:2f:f3:a8:e1:da:32:10:0b:d2:bc:4d:2f:b2:09:
d6:55:ad:ae:a1:b3:a6:a0:22:77:fc:e1:c5:81:48:3d:ba:2d:
03:31:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:45 2025 by rpki-client