Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa
File: 056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa (raw, json)
Hash identifier: Hyh7n3O/HQdO30jFlz+/2Xbw7RqaxVKlbbbSy3qnjPM=
Subject key identifier: 1B:08:B3:FB:77:2E:38:73:48:80:A2:83:4E:8E:15:7D:79:5A:17:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243472FCF7ED204B91BE800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa
Signing time: Thu 19 Dec 2024 13:45:48 +0000
ROA not before: Thu 19 Dec 2024 13:45:48 +0000
ROA not after: Wed 19 Mar 2025 12:45:48 +0000
asID: 396589
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:47:2f:cf:7e:d2:04:b9:1b:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:48 2024 GMT
Not After : Mar 19 12:45:48 2025 GMT
Subject: CN=5fe23eb1-965a-40d9-9353-13b7ee483277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:2e:0e:50:1a:c3:d6:2b:43:c6:1c:e5:0b:
75:c8:3e:4a:41:4d:fc:51:88:01:88:5e:ab:c9:b5:
73:12:b6:27:7c:43:23:7f:a9:e9:e4:8b:41:18:bd:
a5:b0:2d:86:bc:1c:d3:e4:54:d8:c4:73:ef:7b:41:
a8:08:74:5a:53:02:a8:eb:97:f8:c5:95:e0:0d:3c:
8f:bc:40:2c:53:ee:58:9c:78:77:c8:65:00:59:17:
1d:0b:d4:1e:ff:8b:3e:5c:2f:6f:e7:cc:f9:2b:63:
a4:17:49:41:a5:43:cf:39:65:5a:9e:2f:ea:5d:60:
7f:ae:7b:54:35:46:29:ba:6b:f4:45:9f:79:6e:72:
2c:f0:2f:02:37:a1:d9:d6:d5:e8:b0:76:d5:83:98:
54:4f:65:1d:2b:75:c7:9f:3c:c3:ab:99:f2:8f:97:
6f:52:13:9a:75:55:7d:71:13:d0:a9:6f:74:37:36:
0a:d0:56:d1:06:ff:f7:41:a3:ab:87:3e:20:41:91:
51:25:6e:d8:b0:b6:ad:71:16:e2:9c:89:f7:35:43:
3a:ae:18:eb:c0:03:78:f2:44:c8:7b:3d:07:13:4c:
54:70:16:f8:28:2a:0b:ac:1e:cc:e9:85:23:2b:f5:
e9:b5:a8:49:22:13:cd:0d:d0:09:39:aa:e5:6e:4d:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:B3:FB:77:2E:38:73:48:80:A2:83:4E:8E:15:7D:79:5A:17:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c5:56:fa:bc:a5:2c:92:91:bf:6f:4a:bd:e1:88:79:1e:a7:
4a:37:c2:0c:81:31:1e:75:57:c1:9e:af:9f:a0:79:35:23:e0:
c9:fb:ec:7c:36:0b:67:c7:43:76:d4:b0:0a:af:66:e6:7b:b3:
d0:04:a7:89:bd:98:06:69:fd:44:dc:c6:d8:2c:54:03:1f:d4:
ba:88:78:31:37:43:83:74:51:e0:d5:7e:6b:46:a8:55:b1:70:
c1:26:eb:2f:0c:60:b1:d1:db:19:7b:d4:00:72:d0:70:31:3f:
71:b3:7f:d0:07:e8:60:39:e6:eb:56:67:f5:43:f4:8b:cd:3a:
bf:81:1a:0b:f4:50:1f:4c:12:ec:82:1d:d3:d9:70:aa:d0:97:
92:57:e8:46:50:b3:1b:0c:44:de:50:27:b9:fa:ad:f8:2d:56:
71:6f:37:78:63:e0:74:70:84:45:0a:d7:81:2b:f7:23:94:bd:
2a:54:b8:fe:53:77:12:7c:29:e9:cc:fc:ab:2e:fc:70:b7:89:
5f:f4:b5:7c:a3:9e:e4:b5:ee:87:eb:e2:b2:c4:46:a7:ea:5c:
8e:77:18:9a:41:e4:98:c6:ff:23:9f:17:92:c0:98:0b:5f:15:
cc:bd:92:6f:50:45:fb:3e:ce:58:29:5d:c6:34:a7:36:15:e9:
20:13:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:50 2025 by rpki-client