Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa
File: 01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa (raw, json)
Hash identifier: kgCV0+56j5MzZ0VJuqukdmuy16604QVodL7PNS7xTHU=
Subject key identifier: E2:C0:A8:4E:83:FD:6C:3D:27:90:0D:30:BA:F3:8A:61:FB:8F:C4:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E63AB56ACC7EE5C493C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36628
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e6:3a:b5:6a:cc:7e:e5:c4:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=ff2dcbeb-28ea-45e4-9c65-5d0888a7c6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:6f:a2:28:15:fe:35:3d:e4:16:99:75:37:
cf:d8:3b:79:7e:b2:04:6c:05:50:13:90:53:22:cc:
c3:5e:63:01:6f:c5:df:4b:61:07:dd:e5:78:c5:be:
d3:d4:23:08:dc:69:5c:4b:cb:bf:31:61:20:5b:b5:
4f:83:9a:ab:00:11:7b:bc:19:69:82:da:cf:0f:2c:
6c:1d:39:6f:8d:c9:72:b8:9e:a8:19:9f:71:13:11:
e2:30:c0:86:9c:36:0f:ad:37:56:d6:0c:0d:6b:10:
b7:f6:87:38:13:56:1e:da:11:c7:fc:f0:35:3e:36:
d2:a7:f4:cd:80:c8:6a:4e:0a:c0:05:37:39:69:c7:
1f:fc:e8:65:2d:99:77:8e:ef:5a:f9:23:bd:a3:2b:
67:25:e5:60:6c:7b:0c:b6:a5:97:fe:c9:b1:f6:28:
1a:3c:2f:56:e9:9b:73:ba:5b:30:1a:f6:91:8b:b4:
22:90:ac:da:a4:63:d9:09:c2:1c:2d:f7:19:52:e4:
e3:37:8f:d1:c0:a7:63:2c:c2:87:06:4a:25:8a:84:
14:c5:c9:a8:e6:c5:65:b2:17:a9:d2:70:a2:a9:cf:
7f:ca:55:e1:de:13:74:12:de:f8:9c:d4:88:8c:f5:
e5:8b:de:b7:7f:cd:de:b7:04:4a:12:c4:29:c1:3e:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C0:A8:4E:83:FD:6C:3D:27:90:0D:30:BA:F3:8A:61:FB:8F:C4:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01aeba6f-7c4f-3bd7-9e2a-2f731ffcdda2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:13:bf:d7:ec:2a:ab:d5:4a:02:ee:f5:4f:fb:9a:74:ca:d8:
98:33:7d:b2:02:8c:89:bb:5b:da:dd:89:ee:61:6b:ce:a6:36:
47:ca:0a:13:17:60:a7:58:04:c5:20:5c:b5:d7:73:e1:01:a4:
4c:45:f0:f2:09:d8:95:91:79:e0:e3:8b:0c:4e:a0:85:36:66:
07:34:9c:88:4f:61:ae:f2:6f:e8:d8:6f:88:61:d2:e4:c6:30:
77:b1:c8:9a:76:f5:c1:2f:01:c8:28:7e:45:c5:48:38:28:38:
93:ff:13:d0:c0:94:94:e1:6b:2a:16:d9:c3:3f:c4:1a:8d:f4:
1f:5e:0a:62:0c:da:b7:56:3f:26:e5:a1:55:0a:5f:dd:1c:de:
a7:92:07:f6:ce:95:e4:1a:0d:15:b3:8b:08:eb:6b:49:f0:16:
a9:de:de:92:b5:ad:fe:03:20:71:96:2f:af:01:04:29:6d:a1:
e4:ab:f4:34:42:eb:4e:a1:c7:a7:03:9b:9e:a8:9a:32:f7:94:
3d:26:10:38:68:55:77:9a:94:92:1c:c9:42:e8:29:02:e5:87:
f8:29:b1:ed:28:49:25:54:48:0a:a6:f0:08:23:e3:9f:25:31:
c3:8f:80:50:07:1d:ad:4b:b8:0a:fa:75:ab:a9:a3:73:f9:50:
6e:d3:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:27 2025 by rpki-client