Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
File: 499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa (raw, json)
Hash identifier: Ah2hgN3d0ASxyTJyG/XbJL0bO3L32u3OXUDGWPv8zoU=
Subject key identifier: 44:B0:3C:E4:0E:94:41:69:D6:22:58:73:ED:92:C4:61:30:44:C4:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F21CE39CA6663B634340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
Signing time: Thu 19 Dec 2024 13:45:08 +0000
ROA not before: Thu 19 Dec 2024 13:45:08 +0000
ROA not after: Wed 19 Mar 2025 12:45:08 +0000
asID: 397212
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f2:1c:e3:9c:a6:66:3b:63:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:08 2024 GMT
Not After : Mar 19 12:45:08 2025 GMT
Subject: CN=a1f927ae-f864-41ea-aed8-49e537361baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:0d:05:87:43:5a:dd:4e:ae:4d:b3:99:73:
4b:33:7f:26:f8:eb:89:8f:df:f2:41:25:35:6d:2a:
3c:08:9e:a1:ba:3c:fd:3e:46:2c:6d:29:fe:70:b4:
13:4f:66:b3:12:8a:84:9d:61:e1:b7:66:82:3a:bb:
3a:be:9c:71:8e:73:81:11:ee:d7:33:e9:fe:65:5a:
4a:6d:28:74:4c:66:be:92:d9:dc:ba:25:da:76:40:
5b:db:af:e4:ce:69:04:1b:ff:fc:e1:52:ed:f6:7f:
20:eb:05:13:3d:63:74:52:45:31:69:fc:6b:37:f6:
fd:fb:fe:3c:c2:57:a4:0e:84:af:dd:46:5f:2d:34:
32:6e:2a:d1:aa:f5:e9:72:c3:26:ac:c0:49:e1:16:
2d:51:55:93:59:9d:1f:e6:82:3a:13:11:68:1b:48:
04:09:90:85:ac:e8:72:a4:0d:37:9a:d1:e6:37:15:
db:4a:9c:ae:2d:4a:c0:98:81:fe:a5:cf:0c:43:dc:
74:72:2f:71:ac:d4:62:f3:4c:2b:a9:04:cd:e1:47:
cc:99:88:02:a9:3e:17:b0:ba:a6:a9:4c:f6:71:e4:
92:26:7a:72:93:5d:52:56:93:0d:ca:75:bc:c8:ed:
e7:6d:8d:8b:cf:1f:51:51:ae:3c:2b:01:6e:bb:49:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:3C:E4:0E:94:41:69:D6:22:58:73:ED:92:C4:61:30:44:C4:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:90:40:5d:52:83:16:40:00:0a:04:c2:ad:7e:7a:75:95:97:
bc:2c:53:2f:4e:ef:02:8b:b2:09:46:e6:8b:8e:87:aa:5a:0c:
f7:2e:a8:d8:3a:f7:55:d7:50:67:8a:bc:51:94:18:75:65:70:
f0:da:e3:0d:c2:22:38:59:4f:07:12:f5:5f:63:ae:16:2a:66:
c7:bc:6b:41:da:a5:b1:ac:20:3b:47:06:f5:6c:18:71:34:05:
21:dd:67:0e:e2:34:57:ce:78:6a:fc:68:35:68:4a:7c:5f:f1:
c4:2d:2d:21:0d:66:16:51:f6:1a:59:af:3b:cc:93:b6:56:f9:
37:d2:4f:16:cf:03:ae:91:8f:ea:4d:c2:ac:9e:76:25:d1:14:
c8:b4:12:d9:56:fe:4a:e1:42:f0:9b:d0:86:1d:2d:af:aa:95:
37:e7:9a:72:77:9d:88:da:b3:4d:25:c2:c0:c2:93:46:a4:16:
24:d8:93:1e:88:8c:6b:aa:5a:7d:97:39:b4:0d:00:60:99:fb:
c9:68:d6:dc:5a:60:b4:70:68:5c:da:2d:cb:21:ef:a3:77:45:
32:f9:e7:54:e0:7c:33:c5:30:69:78:96:b2:55:9b:53:84:a1:
cd:5b:64:fd:05:30:cf:f0:a0:f0:a7:74:89:7d:ea:6d:28:30:
dd:7a:47:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:05 2025 by rpki-client