Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c4f13e-50e0-3d06-85d5-fc05c1c7cd6c.roa
File: 89c4f13e-50e0-3d06-85d5-fc05c1c7cd6c.roa (raw, json)
Hash identifier: fNPUxOU66YbyIRLzj4d9LD+5ml38AcsA+PXOWu4Dqks=
Subject key identifier: 53:8D:7B:1E:32:76:25:8A:D3:19:69:13:7E:0D:2A:E2:04:DC:5A:D7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F85EE8F9325CD889E080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c4f13e-50e0-3d06-85d5-fc05c1c7cd6c.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396542
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f8:5e:e8:f9:32:5c:d8:89:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=2688a8bc-793c-441c-8b72-0dd71944566e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:51:fa:ef:da:16:f6:fb:09:8f:4a:13:9d:
77:aa:ba:12:c1:f0:93:b7:48:24:cf:e3:f1:a4:a4:
4b:14:bd:04:a7:07:3e:24:6b:81:3b:fd:f3:d9:b3:
21:b2:ca:04:3e:c7:13:36:a0:d2:11:36:15:42:16:
d1:28:7d:fc:4a:3a:10:e6:5f:3a:95:4a:c6:8e:9a:
fc:d5:9c:4c:01:b2:2a:fa:63:2d:7b:90:df:c5:89:
04:7d:7f:e2:86:71:ae:07:b4:22:8d:d3:4b:9b:82:
a2:69:26:02:76:ac:40:6d:2e:88:25:66:f3:ce:52:
ca:db:ec:fc:4f:5f:94:5c:bd:02:dc:75:ab:1e:c7:
b2:4c:4f:e9:66:44:17:0c:bb:36:d4:a7:4e:27:1c:
c0:8a:c9:73:ac:4d:41:4b:85:6d:2c:12:f8:fb:7b:
c2:02:00:82:49:ab:33:95:ff:e3:80:cd:33:15:45:
ea:4e:68:e9:01:c2:fa:c8:f5:21:82:cb:80:c2:a3:
c5:f9:49:83:2c:96:e1:45:b1:a7:63:f9:b8:ef:54:
7b:50:12:82:68:e0:72:85:0d:15:97:9c:52:16:83:
47:53:ea:e5:8f:d6:96:28:b6:16:53:bd:c3:b5:d7:
67:f1:48:df:0e:ac:3c:6e:29:50:6b:ed:42:9e:2e:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:7B:1E:32:76:25:8A:D3:19:69:13:7E:0D:2A:E2:04:DC:5A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c4f13e-50e0-3d06-85d5-fc05c1c7cd6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:d5:cc:40:8f:ce:88:56:46:57:18:af:e4:8b:39:ba:35:5d:
d7:1f:55:55:db:18:4f:7f:9e:ef:8e:61:9f:0c:b7:4e:6e:79:
ba:14:61:c5:28:95:65:ca:5f:ee:13:4b:89:f1:a3:35:7f:62:
51:fe:ef:15:65:dc:f1:a2:14:4c:21:44:e6:65:5f:61:6c:90:
9b:27:5d:55:3b:7b:82:5c:64:53:27:67:b4:bb:4b:20:16:97:
2e:9c:13:26:53:f7:9a:ae:e4:92:1c:82:3a:b3:9f:07:7e:09:
86:37:f8:ad:ff:51:27:5b:03:f1:d5:94:f7:9d:b0:b8:99:12:
a7:d7:ba:12:6b:8d:db:1e:2d:75:b3:f7:bc:cd:24:9b:e5:20:
ea:34:b7:09:74:cd:49:9e:60:cd:f3:44:e9:b5:5d:78:7c:ae:
62:fe:1e:1e:f0:8c:d4:56:c7:29:8f:b6:46:db:d1:69:f9:b1:
75:a5:5b:1c:48:63:c8:fc:0e:f9:f7:0c:a3:7d:7a:72:d3:4d:
2d:71:88:47:53:a8:45:f4:db:13:a9:f8:e3:be:cc:bc:f7:9c:
86:a8:fb:8b:2d:a5:92:32:21:55:ff:55:21:59:b3:09:18:12:
17:e6:02:ea:40:7b:15:d6:c1:3e:0e:e2:82:66:50:9f:b2:13:
a5:25:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:39 2025 by rpki-client