Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5733a34f-5d85-332a-875e-003a5d7bdeb0.roa
File: 5733a34f-5d85-332a-875e-003a5d7bdeb0.roa (raw, json)
Hash identifier: B6fhRE6OqAxETXaw38BNU4xZ4EjnZD6xBmOnVpndsug=
Subject key identifier: 64:64:C5:62:80:43:99:06:09:0F:30:49:49:06:9E:47:84:A5:36:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC1884D9EBE049FE777640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5733a34f-5d85-332a-875e-003a5d7bdeb0.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396586
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:18:84:d9:eb:e0:49:fe:77:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=5dbc6c30-a270-4141-92a7-9ff3bd5f7e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:3d:58:b2:3b:36:2b:46:7a:8f:8e:8e:86:
7f:de:cf:bf:5b:0c:12:af:62:86:0b:f1:ad:6e:2f:
6d:ec:98:bd:82:50:b1:91:a1:88:2e:38:88:de:52:
c4:bf:bb:a7:69:6f:9b:4a:c8:2e:b6:da:b6:f2:b6:
e4:f0:94:4c:58:32:fc:30:89:d8:e9:4f:b9:1c:98:
3a:6f:a7:6e:a5:a9:ba:8f:9c:c8:28:99:3a:8b:6e:
3f:15:0f:a5:f3:df:f1:99:ac:48:37:1f:c6:93:9a:
e5:91:4e:70:f7:2f:0c:4c:fb:98:27:08:02:79:01:
54:14:6f:45:72:25:5e:e4:12:7a:89:a5:bd:f6:8c:
41:70:ce:84:9e:10:56:a5:df:69:59:34:aa:3b:97:
d0:36:27:9b:dd:5f:39:04:ba:c5:70:9f:4e:2d:ae:
cc:d5:e5:50:34:a7:00:5f:8c:c1:11:c1:70:3c:e4:
b0:c0:33:d2:a0:d2:15:91:63:c1:10:ae:d6:32:28:
02:54:1b:e4:d1:be:d1:dd:e2:e3:06:f3:a2:ae:f2:
89:4d:07:28:e1:00:01:b9:2c:6d:35:af:bd:17:79:
a9:d5:59:48:28:94:db:1f:a1:bf:ec:92:03:dc:6d:
47:d5:98:e8:cc:aa:cd:9e:70:9b:b9:85:78:8f:d4:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:C5:62:80:43:99:06:09:0F:30:49:49:06:9E:47:84:A5:36:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5733a34f-5d85-332a-875e-003a5d7bdeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:68:c3:aa:d3:53:99:1d:9d:96:91:2b:c5:c1:cd:42:4b:3d:
2f:e2:5c:80:49:cc:57:01:8c:6c:c1:f3:0d:6c:9b:fc:c2:3d:
28:b4:72:f8:42:0e:4a:a9:69:18:3e:03:35:ff:94:a6:35:7d:
a4:39:ab:02:fc:6a:43:8c:2f:57:fa:33:59:4b:56:c2:61:9a:
0f:7b:55:d9:ce:b8:1f:d3:1f:f2:13:5e:bd:82:90:96:12:27:
0d:e4:49:db:8f:ba:f1:67:65:4a:84:a8:28:9f:80:21:9e:8f:
29:19:56:25:63:89:a7:4e:27:6f:d9:65:0e:3e:1d:31:10:26:
03:6c:05:41:de:c5:49:da:66:7e:3b:6b:39:b5:2f:fc:72:2a:
74:a8:53:d4:6c:57:dd:6a:b5:90:d2:7f:9f:b6:43:4c:48:17:
ae:ee:d1:2c:7c:62:ee:68:52:15:4b:52:92:51:ac:71:23:30:
2f:4a:c0:a9:00:d2:94:db:04:80:26:52:38:23:99:16:2d:8e:
57:95:e3:e3:6a:0e:01:fa:36:a8:b5:fd:9b:34:ac:91:e4:9d:
73:cb:b7:15:26:6e:eb:b3:81:08:1a:69:93:f0:df:ef:35:24:
dd:a3:fa:fd:85:55:73:0d:49:87:68:8d:8c:a7:d9:28:34:69:
a0:b3:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:59 2025 by rpki-client