Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25f918c9-7bef-3b00-9914-5c047f53a0f5.roa
File: 25f918c9-7bef-3b00-9914-5c047f53a0f5.roa (raw, json)
Hash identifier: +kKlw8IhFOWicilqP6zTWw6eFycoQ58qvLJIpPtSfB8=
Subject key identifier: F4:BE:C7:55:AD:51:8B:61:68:F3:2F:07:FD:F6:A1:EC:DA:41:99:F3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAADCAD00545CA42D792500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25f918c9-7bef-3b00-9914-5c047f53a0f5.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 36618
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:dc:ad:00:54:5c:a4:2d:79:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=303c3be6-c4af-4765-a4c7-edd53dfd9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:3e:2b:fe:fd:d7:79:b6:4e:6b:84:88:c6:
fa:db:32:df:b1:98:01:c4:67:5a:a3:44:36:b8:71:
16:20:28:4f:d5:46:29:ca:6d:ce:e9:4a:04:7a:70:
94:27:9a:0a:84:bc:41:dc:73:6f:2d:e5:b2:8f:e3:
b6:e9:ae:cb:a0:33:73:f5:1b:43:2a:85:6b:c3:34:
51:1b:42:ed:92:d2:36:d7:5f:6a:c9:16:2d:93:a6:
b3:5f:66:3e:62:bd:6e:be:54:05:45:97:4b:fd:67:
b0:ec:41:2c:ba:39:01:e1:7f:cd:0d:03:73:a2:b7:
e8:f8:8b:68:bd:d9:10:f1:c5:dd:84:cc:47:67:c7:
a5:33:76:fb:92:24:e0:33:f6:01:da:5d:de:a9:04:
ee:1e:9d:af:36:24:db:5d:ee:5b:2a:38:14:61:ed:
44:68:7a:bc:37:b4:f8:d0:8d:69:f1:41:19:b2:6c:
78:62:8b:39:d3:4d:de:c1:a5:b1:70:6c:d2:1a:02:
3e:f8:ce:90:69:fd:70:3d:b1:f4:71:c6:f9:13:d7:
13:a3:e3:9e:7e:f1:36:9d:22:1c:de:2e:b2:41:af:
66:44:77:7d:28:e8:de:71:bd:ea:ce:42:cb:83:0b:
22:9e:14:ff:4a:fa:ed:5d:02:80:67:8b:34:b3:dc:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:C7:55:AD:51:8B:61:68:F3:2F:07:FD:F6:A1:EC:DA:41:99:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25f918c9-7bef-3b00-9914-5c047f53a0f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:b2:28:37:d8:78:3c:55:3f:6b:4f:7c:24:e6:6b:fd:f0:d3:
d5:dc:0c:f1:fa:71:12:5c:16:dd:ce:70:cb:e1:b6:e0:89:04:
35:a5:46:26:70:51:17:28:d6:78:c3:3f:fa:ed:1e:19:4d:4c:
7a:e9:f5:58:4f:2b:7c:d9:14:20:5c:9c:61:cd:93:8f:d5:dd:
ae:94:1d:3d:ea:bd:4b:ac:f2:21:28:fb:3b:8c:8b:43:9b:71:
e1:5e:d6:64:3a:fd:30:77:03:da:1d:a4:15:21:8d:54:5d:64:
1a:16:42:08:7a:e6:5c:f6:0f:1f:d4:3b:06:4d:a5:41:fb:ac:
db:16:6f:c3:d0:81:63:f5:93:5c:a1:e7:e0:b9:b4:3e:45:70:
95:d0:d7:39:aa:c2:bb:29:6e:81:dc:fd:ba:ff:28:02:31:f3:
bc:d3:83:04:25:c3:8b:25:a1:01:5f:1f:f4:83:e3:41:8b:4f:
90:e2:cc:9d:bf:80:2c:8e:1e:e5:d6:dc:6d:28:fa:f7:15:bf:
2b:3a:c5:06:4d:f2:eb:9d:d5:75:af:37:7e:41:1f:8d:ff:4a:
a0:e8:7a:6a:41:18:95:09:45:60:ff:ce:c2:5e:9f:37:48:b2:
1c:5e:6a:17:9f:87:95:26:f2:88:16:2f:ee:42:35:30:7f:9c:
44:e4:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:43 2025 by rpki-client