Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/257ca173-7c2b-364e-855a-20d725b61901.roa
File: 257ca173-7c2b-364e-855a-20d725b61901.roa (raw, json)
Hash identifier: nHtX6omIQUOAJA0eF9KbUNb86Le7BUhSrjzGvaHQwhs=
Subject key identifier: 99:E3:92:D7:00:95:F9:E9:32:B2:A1:7B:6D:89:C9:00:1A:79:4A:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC17B420AD83BB6629EF50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/257ca173-7c2b-364e-855a-20d725b61901.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396604
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:17:b4:20:ad:83:bb:66:29:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=3a579031-2315-4b4d-904f-57b6e8b1a1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:68:86:40:8a:92:ce:75:77:1c:d3:7e:15:
a7:fd:63:53:ec:25:ea:27:b2:83:65:ca:a2:ea:dc:
27:27:43:a7:12:3b:4e:e9:ad:42:07:de:6e:cc:f5:
42:56:b8:59:a4:40:9c:4f:e2:ba:09:2b:ca:38:e8:
79:f6:9a:cd:c3:1a:a6:48:a5:b0:2f:86:d4:c8:9a:
a5:40:0d:b5:ff:66:b1:49:24:8e:01:2c:55:30:e0:
e8:21:f9:c5:58:88:fc:b3:68:14:d5:59:a8:7c:51:
b6:5a:0a:fe:cc:6d:e5:36:2a:ed:d0:6f:e0:eb:56:
c3:1b:c3:dd:bd:a6:ac:31:0b:e5:37:18:b6:d4:67:
19:9b:4e:cb:c7:c7:cf:37:b9:bf:1a:bf:f2:d4:df:
f9:93:4b:a5:55:d7:93:db:da:73:71:ea:f9:f0:58:
6f:13:27:e1:34:02:36:3c:22:25:49:f2:10:42:ad:
02:49:4b:20:12:7d:98:83:c2:ab:ba:67:3d:71:20:
f3:b0:49:1e:ce:f7:f0:de:e0:92:ec:74:ca:28:2d:
85:1b:16:28:72:36:70:b4:93:25:4e:b2:a6:6b:98:
44:ae:ad:e6:58:7f:6e:96:05:ad:31:7c:c7:b0:c3:
51:c6:61:d4:33:c6:a5:70:d5:20:3f:d2:b4:58:20:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:92:D7:00:95:F9:E9:32:B2:A1:7B:6D:89:C9:00:1A:79:4A:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/257ca173-7c2b-364e-855a-20d725b61901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9c:50:b5:af:7a:b7:de:30:c8:28:eb:ec:2b:01:6e:90:eb:
80:6c:9d:5c:ef:2f:99:44:19:22:e8:0c:3c:f7:3b:a1:f6:2b:
20:1d:d0:9c:bc:2d:25:25:fc:e3:96:b1:82:64:be:62:d9:2c:
b2:4b:72:0a:ef:87:8b:cf:b0:b9:c8:6f:ce:dc:8f:29:10:2a:
8a:d9:75:a3:f2:e1:5d:cf:67:5e:4d:72:90:74:8e:74:bf:fb:
9d:6d:e5:df:83:d9:70:f0:31:0c:b2:f3:3b:44:89:b5:7e:36:
af:ef:e7:b5:4c:5d:50:cf:50:94:7a:31:7a:77:29:22:4b:35:
ca:ec:d7:73:af:ad:15:92:06:f5:92:c3:64:25:2f:f8:51:d8:
c3:2e:05:1c:95:06:e2:71:19:54:7a:34:07:95:29:92:c5:6b:
39:df:c1:a7:d9:f3:8e:89:21:44:24:b1:22:95:7d:4c:b0:5d:
0a:19:ea:ad:ab:9b:f6:c3:0e:28:2f:a2:a5:9a:42:8d:c7:1a:
cf:4d:d4:4a:c1:c7:cc:d0:4c:db:b2:8a:89:a9:70:cf:fc:f4:
5c:73:36:e0:30:11:59:7b:ee:3e:f7:2b:2f:df:b8:29:f3:42:
2b:74:71:23:95:80:f0:7e:5a:a1:73:ad:7c:13:aa:5a:2e:69:
44:80:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:12 2025 by rpki-client