Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
File: 953f9f50-447a-3f5a-8426-70452fb42edc.roa (raw, json)
Hash identifier: ED1VDvvKKJ0nWXxkPL/8rhddkL/Uvm26WSCztB/doww=
Subject key identifier: 62:91:5D:89:F4:65:49:28:5A:91:C0:61:27:92:63:B2:DC:D7:5C:F0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433559AF0AC0F333B7B500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
Signing time: Thu 19 Dec 2024 13:45:39 +0000
ROA not before: Thu 19 Dec 2024 13:45:39 +0000
ROA not after: Wed 19 Mar 2025 12:45:39 +0000
asID: 396566
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:35:59:af:0a:c0:f3:33:b7:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:39 2024 GMT
Not After : Mar 19 12:45:39 2025 GMT
Subject: CN=07de96d1-20f0-413a-b7d9-1a2075840e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:bc:81:45:c9:c1:53:6e:eb:19:a1:4d:d0:
09:4c:25:86:3a:da:37:90:9a:2c:ac:df:16:af:c8:
da:81:3c:3e:37:75:47:76:cf:20:2c:c1:27:66:19:
64:15:d0:76:60:95:1f:8e:fd:4f:84:4f:a7:c9:90:
10:31:21:5f:04:81:5e:65:82:33:cb:9e:17:03:c2:
dc:ae:a3:8e:04:c9:74:50:1d:7d:f3:e4:81:a7:39:
63:ab:ee:2e:0c:29:ad:7a:41:97:a4:f3:19:ff:48:
66:b3:a0:82:81:66:8f:54:c0:09:e9:ed:10:25:d7:
70:33:63:cd:86:2a:2d:c7:91:87:cf:33:38:3b:a9:
6f:8c:8d:a1:b6:00:8a:0d:ab:73:e5:ca:ec:a1:8a:
50:3f:1e:fe:d5:ec:d4:4a:07:b4:be:e1:1a:24:15:
8f:f5:92:45:b9:01:44:1d:07:1b:b6:f0:9c:98:be:
c9:d1:c9:c6:b8:a2:4a:8c:4b:1c:62:82:da:d7:f0:
02:a8:4b:52:0a:12:29:3d:8a:d9:a6:e9:4e:c3:40:
c0:7e:f8:a9:c7:17:86:48:3c:0d:ca:c7:c0:b4:a3:
d1:15:d3:92:c0:bb:62:d7:52:44:92:c5:7c:22:a6:
bf:7c:00:4c:9d:8a:52:79:56:80:5a:f7:f0:e4:a9:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:91:5D:89:F4:65:49:28:5A:91:C0:61:27:92:63:B2:DC:D7:5C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:ff:07:ae:58:5f:56:b6:89:e0:96:9c:4f:9c:13:5b:ef:17:
80:6f:5e:3d:b3:33:f0:64:44:9d:bc:eb:37:7e:07:87:8b:22:
5c:cd:0c:25:46:e0:9b:6f:fe:7e:11:51:b1:15:c0:83:c2:19:
6c:86:ba:33:b7:12:f1:a9:b7:ce:aa:e9:16:c9:cf:b7:72:ae:
29:a7:5f:77:74:14:8f:5e:37:8f:03:a8:62:98:76:99:48:0e:
66:10:ad:82:ec:2e:b8:bd:be:48:dd:8e:4b:e6:65:c8:6b:6e:
05:c0:d2:22:ab:a5:76:fa:c7:74:c0:cd:5e:29:20:84:77:02:
88:67:79:8c:8f:8a:25:74:9e:45:73:85:b8:9e:cd:57:1e:d3:
b9:0f:20:2c:c4:fd:80:f1:cc:83:7c:4c:50:8b:3b:7e:66:0a:
62:f6:3f:04:4b:4a:ce:ec:84:ad:c4:f6:a4:9d:24:05:bc:11:
75:1b:55:db:7c:28:f3:c4:9f:00:2b:91:55:31:3c:4e:eb:10:
92:08:a1:2b:8b:ae:18:6e:d8:6e:fc:e3:10:4b:71:41:84:72:
d9:69:e9:7e:24:d0:6f:74:66:1e:0b:98:19:58:cd:5a:8b:fe:
3d:50:9d:7e:c2:d0:76:30:1d:48:8e:1c:f3:07:ca:e3:55:e4:
a5:4f:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:45 2025 by rpki-client