Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1aadd0c-7c90-31bc-9766-d2538bd02567.roa
File: c1aadd0c-7c90-31bc-9766-d2538bd02567.roa (raw, json)
Hash identifier: Cuv+XXsfT3yoWGVkWWqklKGDfmOawtk0ko+iXdyB6Nc=
Subject key identifier: 05:82:E6:B2:91:DC:F8:F1:A8:E6:BA:EE:5C:D6:8B:F0:F9:E0:5F:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E5D890A8E175958C00F5
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1aadd0c-7c90-31bc-9766-d2538bd02567.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22547
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e5:d8:90:a8:e1:75:95:8c:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=6f25510b-1c6b-4c9c-be12-4988e1a28f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:fa:d3:6a:1d:d0:f4:0e:7f:19:dd:2d:cc:
85:04:52:f1:bc:0a:e5:29:5b:5c:c0:5a:a2:4f:9a:
f5:d5:fd:2c:8e:10:0a:4e:42:47:ce:bd:39:e5:e2:
15:49:1b:5b:f5:a1:bf:fd:48:8f:51:2b:48:54:07:
f1:94:f3:b1:79:97:b6:b0:7b:c0:96:7d:33:5d:c3:
e0:13:e4:f7:5f:3f:d4:48:a3:85:cb:d5:1f:12:20:
2a:e8:d2:69:3e:0f:6d:4b:41:5f:d7:1e:5c:af:35:
57:ee:46:4f:68:26:95:67:fc:b4:47:20:fe:e1:a3:
d5:92:fb:66:b5:f4:9b:0d:79:39:a9:c3:e3:8c:c3:
af:90:eb:3d:01:0b:e8:00:96:36:0f:54:0a:22:86:
11:42:17:a0:6a:cc:15:2c:fb:23:fa:24:39:f2:30:
87:08:cb:64:76:be:30:04:97:c0:84:a4:b6:6d:5b:
28:13:59:0b:52:d5:41:7d:cd:9e:2c:09:7b:56:16:
e8:ae:b8:16:c0:38:84:07:19:66:c6:b8:b3:ea:42:
d6:21:5b:20:e1:5e:66:9e:98:51:3c:62:a1:d0:a4:
20:da:63:d4:2e:82:57:4a:a6:ed:02:fc:0b:ee:3c:
ba:a7:de:36:5d:3d:46:8d:b8:a7:78:b0:98:f8:d3:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:E6:B2:91:DC:F8:F1:A8:E6:BA:EE:5C:D6:8B:F0:F9:E0:5F:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1aadd0c-7c90-31bc-9766-d2538bd02567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b6:b8:9f:56:3d:a3:48:0d:73:5a:8e:50:57:a1:cf:d8:fa:
f1:99:19:24:1d:8f:bf:c7:f5:da:05:cc:85:13:06:4a:77:d6:
e9:a8:cf:92:d6:7f:9b:52:ea:a0:96:e0:c1:35:8f:f4:ce:d3:
6b:bd:d6:24:da:81:89:70:bc:44:c0:75:cd:1e:25:71:ab:91:
5a:95:13:f0:6b:99:b2:fc:74:d5:71:38:a3:6f:8b:cb:bc:72:
e5:29:5d:87:58:cc:ea:16:33:1c:84:f0:ac:f2:24:ac:b6:fa:
f4:1d:0a:b8:b7:23:28:6b:be:4b:81:47:17:28:ed:6e:1f:07:
e8:e0:64:09:d6:25:a7:d7:8f:bb:57:2c:84:18:69:81:b2:a2:
11:ff:54:33:ff:d0:e2:56:cf:c9:c5:ee:14:26:f0:4c:dc:b8:
83:1a:dd:2d:f4:af:db:ce:f2:7d:18:de:bc:c1:66:cb:67:f4:
95:6d:70:d8:4c:b9:aa:5e:e8:0c:71:24:ff:87:af:f2:96:cd:
a3:b5:8c:93:d2:b4:4b:8d:12:02:75:3e:a7:fe:37:af:04:36:
47:7a:76:38:37:bb:e4:30:81:69:d7:c3:21:57:0d:a1:06:3b:
63:b5:6a:44:da:27:7a:d6:6a:24:35:d6:a0:f0:a4:77:78:fb:
87:89:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:13 2025 by rpki-client