Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48d74edd-266d-315c-95ba-a4cd2df592b6.roa
File: 48d74edd-266d-315c-95ba-a4cd2df592b6.roa (raw, json)
Hash identifier: pJIa4xWSuzujT/+F3H1KzTB3nTiiygPl1ACx4cRTAa8=
Subject key identifier: CE:BE:EB:C2:A8:87:85:74:76:3D:6F:82:79:08:51:8C:26:97:F9:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC16F43F2F8D87A3431800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48d74edd-266d-315c-95ba-a4cd2df592b6.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396576
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:16:f4:3f:2f:8d:87:a3:43:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=42b9d127-52d6-4d47-8e1c-d79b98a71643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:3b:76:85:ce:74:27:96:ad:62:bc:1e:a0:
9d:c0:b3:2f:a0:31:6f:f6:de:f8:b1:d3:92:6f:a7:
96:43:05:67:a8:86:48:7d:05:3c:57:ee:5b:0c:fa:
46:7b:6c:24:43:62:64:3b:a7:6e:fc:33:69:5d:b9:
ea:86:32:05:50:16:17:60:0e:ca:3a:e0:0b:ac:15:
96:c9:84:0d:66:be:f2:1f:a8:1d:2a:8c:12:78:26:
fb:89:c4:d3:ba:3b:04:bb:ba:ea:0e:fb:23:90:c0:
bf:54:ae:ac:78:38:2d:a2:58:d7:46:ce:8d:ab:56:
61:17:5d:99:58:17:39:57:4c:aa:3c:b5:ea:c1:d0:
6b:e7:68:93:36:45:72:9a:45:aa:e2:5b:5f:fe:91:
d5:37:50:ee:cc:1c:36:4e:3f:32:07:a1:fa:ba:a7:
9b:51:7a:08:f1:17:7e:f3:4d:e1:da:8b:4a:05:48:
10:24:f5:d8:1f:1b:20:fc:9e:90:0a:de:2b:35:ee:
de:5c:96:36:79:4f:95:da:35:b4:fa:0a:d8:a7:96:
b4:f6:73:bd:9d:96:24:91:87:fd:77:42:fa:36:8a:
79:5e:0d:3a:86:d1:23:59:0d:ae:61:a8:89:a8:08:
33:05:b0:5d:be:95:12:aa:54:92:24:d7:35:09:26:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BE:EB:C2:A8:87:85:74:76:3D:6F:82:79:08:51:8C:26:97:F9:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48d74edd-266d-315c-95ba-a4cd2df592b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:56:64:53:e2:80:71:a2:10:a3:df:91:89:46:38:03:84:b0:
cf:39:3c:ef:82:03:09:90:c8:84:a3:7c:44:14:a2:4f:98:5c:
eb:90:0d:a8:01:9d:d5:d2:c7:d9:8d:1d:cd:78:43:b6:37:e6:
7b:fb:78:5e:f0:8e:2c:df:ee:15:6a:19:44:ef:f4:39:0d:64:
d9:fa:7a:e2:c4:64:52:7a:c7:58:9c:a2:67:5c:3e:51:bf:18:
c6:95:79:03:4f:8e:a7:84:2a:df:b1:79:f1:5f:ce:a0:8c:f3:
55:45:72:a3:d3:5d:6d:fb:12:5d:cb:a5:9d:71:3b:ae:86:c3:
69:5b:2e:aa:07:ad:d4:41:e2:b2:36:7d:47:a1:1a:f5:78:87:
dd:4d:69:93:63:54:3c:33:a2:6a:90:a9:a3:a4:e5:d5:f7:25:
eb:60:ee:d7:7c:02:80:45:64:8b:39:41:f3:80:46:dc:37:05:
f7:55:8a:c9:e6:e8:11:02:d5:d7:7c:db:d7:71:2c:df:ba:5d:
91:bc:00:22:bf:9a:2d:05:f5:87:ea:d5:66:cc:b2:a7:43:5a:
13:b3:c9:f0:bf:09:2d:ec:1f:87:aa:d9:81:ed:57:5e:2d:d2:
b1:6e:1d:b9:e3:14:cc:fa:ec:eb:49:19:2e:3e:89:66:56:62:
8e:c4:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:05 2025 by rpki-client