Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa
File: 7f3acb1a-4cde-3114-b917-59f845f90356.roa (raw, json)
Hash identifier: Fe9VeqMP4T8Fu5RGxaVpRR92lWnMYCTw4v6vf03OCzE=
Subject key identifier: 54:EF:9E:C2:0D:56:82:BB:74:C9:8D:E5:CF:5B:B6:47:CB:BC:20:12
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183EB094986816AA05BC080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396578
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:eb:09:49:86:81:6a:a0:5b:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=1d75ce59-51cd-4940-90a5-f60a60437e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:62:97:e1:c6:79:10:5f:7a:8b:6e:d9:93:
d3:1b:c5:8a:0c:6e:a1:f9:c1:2d:e6:50:8c:90:20:
58:3f:5e:05:35:4a:55:d7:52:3e:b3:58:b2:65:62:
9a:62:f7:11:d7:c8:97:74:db:6f:9d:fb:93:83:47:
e3:98:82:2d:e3:dd:5a:92:27:97:de:3c:27:7a:c2:
03:d8:c5:e0:b0:92:d8:27:56:bd:b6:f9:2c:a2:5d:
07:65:9d:4f:ad:04:65:a5:d4:57:31:3e:f9:e7:4f:
f3:6d:2d:62:f5:27:c2:2a:a4:56:15:8c:6d:4a:ea:
17:06:8a:96:f6:29:fc:8c:fb:43:24:98:56:89:d1:
aa:ad:02:33:a1:10:8b:d2:c9:c0:09:37:02:26:a7:
02:e3:a0:e9:d2:7c:a2:2c:82:97:9c:a5:9a:65:27:
1b:22:ae:ef:eb:d3:34:98:a5:27:3b:85:3b:8c:40:
3a:ac:8a:c2:54:00:be:19:7c:e9:98:28:1f:dc:da:
51:5c:0e:f6:35:7f:9d:84:e8:26:8b:ee:dc:6a:6f:
7e:61:20:13:6f:fc:74:86:06:0c:bd:14:17:9f:12:
33:f7:c8:f8:aa:8b:38:4c:ca:26:cc:cf:19:d5:05:
87:82:62:02:d5:39:e4:f9:d1:c9:da:ee:2b:ff:c5:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:9E:C2:0D:56:82:BB:74:C9:8D:E5:CF:5B:B6:47:CB:BC:20:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:8e:9e:33:b5:d1:96:50:b1:96:71:62:2a:9e:f3:01:78:bd:
e8:85:cd:56:68:51:a6:80:e9:1c:72:65:40:48:52:1b:79:2c:
91:d9:c5:72:29:1f:20:18:cb:83:10:ee:48:fe:81:bd:16:12:
83:db:10:f5:6a:db:df:d1:78:be:8b:03:23:33:17:05:6a:7f:
25:99:33:b8:77:88:ed:17:ab:d7:65:89:2e:9e:94:27:64:91:
d9:b4:3e:03:0c:aa:f1:b4:24:07:15:e8:fe:f3:47:db:51:e8:
9b:76:47:e8:0d:98:7a:6c:ac:af:7e:99:76:96:ec:bd:5a:46:
0b:a9:34:51:96:f3:97:38:08:7a:af:f3:01:1c:e6:48:55:ac:
49:1d:72:40:a3:e6:34:31:12:d8:32:5d:81:63:e6:83:bc:a2:
60:cb:0f:9b:81:fc:60:f5:4b:18:40:db:55:c3:13:d8:3e:bf:
ed:91:c3:5b:a8:4c:cc:69:ce:8b:d7:27:45:cc:b2:ab:f1:fc:
82:d7:ee:23:ac:96:d1:be:de:14:ed:be:85:b2:a4:6c:ad:ec:
dd:fa:99:1b:8b:4d:d9:30:5d:87:48:c4:cc:75:ef:63:7f:81:
ad:e6:41:c2:8d:45:16:2d:12:2e:40:c2:dc:b5:18:c6:fd:ec:
c6:12:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:27 2025 by rpki-client