Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
File: 5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa (raw, json)
Hash identifier: OD1KLB95MbqdmQ35MVHp5PMlIZYAZP+XDG1/Y4hNk6A=
Subject key identifier: 54:C5:D9:49:4D:8C:F9:CF:62:69:0C:26:A1:96:A2:BC:35:48:EF:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E9330BA3DD07B69CC4980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 397197
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:93:30:ba:3d:d0:7b:69:cc:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=8ee5d644-aad0-495d-9b53-581a31f4d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:bd:2f:1b:77:4d:e0:20:e0:12:f9:bd:41:
d7:78:ae:1c:3a:2e:2f:ad:c1:ce:c7:10:f4:2c:cf:
73:e2:29:a5:fc:b7:1c:18:34:f1:21:25:29:c8:fe:
c8:0e:6e:03:93:b4:79:29:da:4d:d5:88:5c:5d:b8:
6a:ba:eb:f5:f9:da:fd:f9:d6:7f:1a:c4:dc:fa:e4:
d2:5d:3a:27:7e:e6:ac:3c:42:ff:c6:21:75:5b:a5:
f0:ac:70:aa:5a:6d:ba:50:d5:ff:f8:50:d5:49:b7:
1e:d5:e1:c3:03:c0:26:e3:5d:b9:90:b4:90:ef:e0:
f3:12:ff:f2:f4:b5:7d:ce:5f:42:d2:df:30:8c:49:
fc:5e:48:98:f5:6a:4f:38:10:b2:aa:52:64:97:be:
3e:ce:74:bd:a0:e3:e4:ae:8b:b5:a1:f9:51:9a:24:
c7:ba:29:53:c8:e5:ac:70:b5:4f:39:5a:73:68:69:
ef:0b:8b:36:d7:8a:0c:85:23:45:d4:37:6d:0b:53:
5b:94:1e:2d:65:db:3c:65:a5:72:64:39:ef:68:78:
3e:58:6b:71:e5:c3:87:a6:49:b0:3b:62:f5:01:a1:
eb:e4:43:75:67:8a:05:b6:8f:6e:09:24:c9:9f:ab:
e2:12:7b:59:2f:fe:57:7c:87:8b:64:ad:a8:80:c4:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:D9:49:4D:8C:F9:CF:62:69:0C:26:A1:96:A2:BC:35:48:EF:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:05:44:69:86:41:23:64:13:ae:90:1c:65:4e:ba:fd:65:0f:
33:a5:6e:29:d2:7b:8a:64:93:b7:cf:c0:78:cf:ca:f5:87:58:
41:e4:f9:bf:3d:97:b5:fb:43:16:80:df:ed:7d:69:c7:5d:5d:
97:53:3d:d8:cc:9d:1b:0d:2b:5b:8f:2a:59:42:13:43:0f:8e:
7b:ad:d8:0e:d9:8e:1f:be:6d:8f:dc:ad:69:67:73:88:7b:64:
a1:01:e4:2d:91:5f:2b:5e:f8:50:8f:a2:49:f9:af:95:1d:f7:
48:3c:3b:20:ee:92:2d:f1:af:ea:3f:2a:47:77:91:24:bf:2b:
8b:1c:5d:7d:00:79:b1:05:c8:39:5a:b5:b9:c4:6e:99:0b:98:
b0:88:97:29:87:55:ba:ea:d1:80:86:d4:5d:ff:a7:21:87:54:
f3:4f:25:14:b7:e2:c5:aa:aa:7c:0e:04:98:c3:b8:c6:5b:01:
28:cf:80:fb:4f:b8:c0:d4:38:72:4e:2e:cb:e3:be:7a:fb:78:
8d:65:8f:d9:7b:45:5e:a0:f4:83:9d:ef:0d:30:62:dd:ea:b7:
94:02:a2:b4:b5:4a:95:90:03:14:2c:fd:8b:94:2b:aa:6a:a2:
a4:b1:26:c9:49:c6:ec:8e:3d:bb:58:46:39:b9:a3:87:7e:82:
c7:c5:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:41 2025 by rpki-client