Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
File: 36db3a37-3c69-3146-ab84-6135cf19ca68.roa (raw, json)
Hash identifier: yNGPcJeKDLIzS9ZIoBLmR4inK2TbRxOmW/c5th6IUXo=
Subject key identifier: 3D:CE:D2:09:6D:D5:22:A8:45:9E:A2:B4:C8:8E:0E:AC:6D:BA:56:BE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842432FADEC72456F8BDE8480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
Signing time: Thu 19 Dec 2024 13:45:37 +0000
ROA not before: Thu 19 Dec 2024 13:45:37 +0000
ROA not after: Wed 19 Mar 2025 12:45:37 +0000
asID: 25485
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:2f:ad:ec:72:45:6f:8b:de:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:37 2024 GMT
Not After : Mar 19 12:45:37 2025 GMT
Subject: CN=5aa79c59-9743-4cb7-b4e4-e18f254c699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:1f:12:db:78:5a:08:0e:04:c8:16:5a:9d:
30:d9:3f:db:41:0b:e3:4a:39:aa:16:6e:2e:6e:f1:
61:6a:cd:28:2e:44:1d:b9:b3:b6:e5:d5:c3:68:22:
04:68:24:f7:5e:0f:63:53:ea:d6:01:8b:e4:17:c6:
d0:83:47:97:39:01:20:09:8e:98:a7:dd:8b:b4:49:
77:e9:a6:c3:55:bd:63:f4:34:cd:be:de:bf:25:a7:
ee:75:a6:1c:61:9e:5d:4c:f3:11:a4:54:ea:31:a0:
65:31:9d:c4:1c:cf:69:e6:7b:0d:7f:78:7e:cc:93:
99:52:4a:d4:07:60:42:d2:6c:42:90:22:7c:51:31:
cf:7c:1f:7c:6c:77:cb:dc:40:25:12:23:d5:0c:ef:
36:18:9c:e7:e8:b3:39:70:56:e6:a8:1e:27:c9:93:
49:2b:32:f1:3b:30:37:5d:4f:56:ef:eb:d1:0d:12:
0a:63:07:af:e5:13:a0:43:97:6c:22:50:3c:80:dd:
dd:54:da:27:bf:b5:85:93:9e:c7:03:6c:26:8b:b3:
36:11:b3:c4:74:4e:6f:56:37:fd:6d:37:90:25:9e:
f2:31:a8:82:00:7a:63:b3:14:bb:03:77:56:70:0c:
30:c4:cb:59:df:2f:55:bd:3c:e5:4e:03:d9:58:1d:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:D2:09:6D:D5:22:A8:45:9E:A2:B4:C8:8E:0E:AC:6D:BA:56:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:00:61:35:8d:2f:92:ca:64:7e:49:db:e5:35:57:7e:5f:d5:
ca:db:11:dd:5e:45:52:fe:63:60:f6:95:3e:40:e6:94:39:20:
25:81:09:3a:0e:99:57:bb:97:9d:fb:92:5a:f5:9a:70:d2:e3:
6e:6d:3b:d2:7b:1d:b9:80:48:37:f5:fd:04:65:f9:82:06:8f:
31:6b:52:a9:82:ad:e8:6a:8b:5c:a3:1b:21:86:8f:e7:9c:4a:
42:88:ca:d2:bd:86:c6:55:8f:c5:53:a3:5a:7c:5a:be:45:57:
b6:bb:70:40:73:24:6b:34:6e:8b:e7:5d:7b:52:36:83:09:08:
9e:1c:d2:31:9b:6f:c4:7e:26:b3:1a:ff:44:66:bd:dd:3a:bc:
19:6d:94:3c:46:95:5f:88:d1:88:04:df:20:26:5b:82:ee:1c:
e8:05:14:90:6a:8d:7d:05:23:44:6b:cb:ce:68:17:7d:4d:2b:
09:47:36:12:a9:61:5e:4a:e5:68:5d:07:08:f3:ed:c3:a7:e5:
6c:e3:58:17:c4:c5:75:61:ec:9c:f4:bb:be:11:a1:1d:26:cc:
a1:db:57:07:55:a9:d9:29:c2:ff:fa:2b:24:14:19:df:2a:0f:
57:f6:31:68:30:5d:5f:bc:02:c2:1d:d7:7e:ea:94:6a:3c:5e:
db:fd:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:08 2025 by rpki-client