Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa
File: 84db4c5a-a983-3f25-880d-e7b259a1e26e.roa (raw, json)
Hash identifier: Vymydnkjtu5XeOOKVNUtcOQ1wHzCTT6Sk2vlOPOAPFI=
Subject key identifier: 3A:D5:55:E0:B5:F7:24:D0:3F:71:DB:C8:68:A9:63:74:74:DF:53:29
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F7C71A9655BCA1FC4A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396573
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f7:c7:1a:96:55:bc:a1:fc:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=f62e8f19-3ec3-4870-bf4d-769d2430adff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:eb:75:33:89:e4:89:95:fd:34:43:2e:47:
a8:7b:04:7c:ce:da:bc:ad:09:ec:f3:cc:16:1a:f9:
9b:f3:72:20:7f:87:b3:26:10:f0:cb:c9:cb:6c:9d:
69:70:af:eb:72:2c:aa:ef:d2:c6:9d:de:c9:a2:a8:
61:cf:fb:28:de:59:c5:3b:8f:49:3e:c5:f5:f5:5d:
bc:09:84:0e:ca:a2:7c:65:1d:a0:70:f8:35:91:a7:
00:35:42:d1:65:e0:54:ba:d7:2b:30:7f:ab:69:d9:
99:2d:8e:c6:fd:34:97:7e:3f:10:d1:58:7c:e3:32:
2a:51:2b:44:b3:08:a1:d2:37:6f:12:0d:a2:bb:7b:
3e:dc:db:d5:7f:a4:e0:26:9b:7a:2d:ec:19:f3:05:
95:45:95:e9:49:c0:db:39:42:e1:0b:ac:d5:0c:24:
4a:ee:ce:2d:69:35:a9:9e:71:b7:c6:f8:a0:19:c0:
2f:cd:d5:94:a2:71:ca:3c:5d:fb:56:2a:8a:2d:6a:
12:2c:18:c5:e7:63:92:d4:f8:fb:2b:6e:55:3f:47:
3b:ee:33:14:bd:33:30:74:60:fa:40:09:44:b5:fd:
d6:55:59:9e:17:d6:c5:fc:70:e9:42:ac:40:6b:53:
97:49:d0:4f:45:7b:39:0b:ae:06:d2:13:6a:f0:7f:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D5:55:E0:B5:F7:24:D0:3F:71:DB:C8:68:A9:63:74:74:DF:53:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:29:99:3b:3a:19:2d:a0:e7:f5:b1:c2:c4:39:ac:0b:7b:aa:
ab:e5:52:a2:e8:00:35:aa:83:d8:a4:6e:95:78:ff:b6:b8:c4:
5f:49:65:b9:c5:58:d7:dc:e8:45:3d:c1:d0:44:66:78:56:9b:
bb:03:97:4f:16:88:e3:16:1e:57:ad:b2:15:41:03:0c:02:4c:
a3:c8:9b:47:44:d4:16:77:8e:3b:89:87:2f:b0:6d:6c:44:ab:
db:9b:84:e8:cb:f1:58:96:71:b3:a0:25:09:c3:df:8d:4b:15:
66:db:e7:36:b7:6d:30:0a:d0:4c:59:cf:9a:cb:08:a0:59:96:
ca:23:32:18:4e:bd:ed:ee:a0:ca:8a:bb:8b:5d:19:53:bb:64:
33:96:e5:a5:79:31:71:8d:b6:d0:e6:01:98:e2:f5:76:b2:1e:
e0:87:fd:8b:74:b7:90:5c:d2:c0:4f:85:65:95:21:29:3a:0d:
83:f0:07:b5:29:ae:cf:46:ea:ef:2f:ef:39:31:47:0d:93:d4:
83:0e:4b:48:90:28:e2:84:95:88:e5:30:fa:f3:3e:88:2c:2d:
35:9c:e8:0f:58:6f:7d:1f:4c:e2:07:dd:02:ee:d1:f8:51:c5:
ba:44:ee:e8:45:7e:70:17:8c:52:97:bc:b3:ab:12:6d:1a:1b:
38:4a:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:03 2025 by rpki-client