Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad7a0259-a645-3643-a0bc-56d389a95a1e.roa
File: ad7a0259-a645-3643-a0bc-56d389a95a1e.roa (raw, json)
Hash identifier: nt24WtD1F5ZpJmUcKEegF38i1JpORFzl4IqU61zPPVs=
Subject key identifier: 06:F4:E7:3C:8D:B5:55:03:34:5E:A7:2D:D4:8E:B4:BD:04:50:90:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CFE0D0E45C9581BB1AE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad7a0259-a645-3643-a0bc-56d389a95a1e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396603
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:cf:e0:d0:e4:5c:95:81:bb:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=05b33cf4-b99d-48d3-9a8b-c90c9804f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:6a:14:9c:5b:f3:de:72:f7:76:b6:70:1c:
c9:97:a3:99:ce:b9:2c:b0:d6:6c:52:26:22:18:96:
f0:39:8c:08:cc:be:c7:da:79:50:01:6a:1d:98:a6:
74:ea:19:7a:1c:dd:92:b6:2c:c5:ba:2b:4b:81:3c:
35:37:e8:70:6e:d4:6b:8a:e6:ea:7a:01:28:a6:a0:
9b:e8:38:59:24:51:cf:63:41:71:f0:3a:7d:d9:95:
99:ec:cc:a4:19:69:6a:72:c9:9d:7a:e3:69:8e:ab:
8e:af:54:4c:01:25:82:ce:a2:d0:1a:79:de:5a:f1:
e9:17:5f:e5:ff:22:59:35:33:8d:58:c0:19:ae:1b:
e9:05:20:5a:8d:e6:f1:af:71:d4:43:b5:72:2e:23:
e2:95:84:e0:3f:64:94:9f:eb:13:64:51:d4:0d:d2:
6a:0f:52:25:99:8e:c5:15:6d:15:eb:10:70:87:9f:
83:18:e7:47:bf:2c:60:3e:7b:16:3d:5e:4d:73:22:
65:87:21:d3:df:bb:33:83:b4:a8:99:0c:af:e1:41:
ab:38:b9:27:0b:09:49:ca:f7:d0:55:79:3b:ac:e9:
3f:fd:a5:af:65:19:10:7b:12:27:a3:2b:9c:97:bb:
ca:ae:11:e6:28:57:13:94:62:65:5b:7c:55:7c:cd:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:E7:3C:8D:B5:55:03:34:5E:A7:2D:D4:8E:B4:BD:04:50:90:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad7a0259-a645-3643-a0bc-56d389a95a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:84:96:cb:50:2b:ef:72:26:f7:16:df:d8:c0:34:4a:6f:6d:
84:39:45:ec:78:a6:b8:c8:f5:8b:81:1c:52:c9:c5:28:88:69:
91:68:fe:b9:ad:67:8a:0a:60:6c:bc:51:25:da:2f:28:55:8a:
d3:ff:22:5e:ce:f4:18:81:80:ca:12:11:a9:11:d8:8b:89:77:
6b:3e:66:db:0f:a3:82:45:87:b3:b0:48:04:a2:28:fe:1d:a9:
a3:12:78:59:08:92:b7:30:2a:30:dc:4f:3a:2f:9b:98:60:2b:
15:5e:8e:a6:c1:0b:c0:5c:dc:eb:80:01:e8:f7:e4:d6:af:f6:
88:a3:7c:9b:e7:1b:b4:a5:ff:c6:a1:07:2e:1a:da:f2:4f:3b:
fc:e6:a7:16:ce:cb:f0:b1:42:ac:05:e3:df:16:03:b5:93:b7:
f1:89:9d:4e:42:72:5e:5d:eb:7d:35:87:8b:aa:aa:a1:02:65:
aa:30:94:11:ec:77:bb:23:14:22:5c:b4:0c:27:50:2b:c0:04:
60:d0:59:4a:33:70:41:dd:16:3b:4f:b3:27:5d:18:c8:2d:9e:
49:c3:ac:85:2b:3b:d3:a8:7b:18:ce:34:36:7c:e3:b9:e3:7f:
b6:35:67:44:ad:20:62:4b:34:03:cc:a6:8e:a3:18:35:cb:0a:
c4:99:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:51 2025 by rpki-client