Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa
File: 99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa (raw, json)
Hash identifier: bOL8lakdldITzqH+WtaPbvl/c4EDsf0weOOcy9PSmmo=
Subject key identifier: 07:4C:68:2A:32:14:33:9C:53:DD:B8:42:9C:49:F6:EE:6D:D3:2B:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242EC0063A2AB1DBDE69D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa
Signing time: Thu 19 Dec 2024 13:45:05 +0000
ROA not before: Thu 19 Dec 2024 13:45:05 +0000
ROA not after: Wed 19 Mar 2025 12:45:05 +0000
asID: 396594
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:ec:00:63:a2:ab:1d:bd:e6:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:05 2024 GMT
Not After : Mar 19 12:45:05 2025 GMT
Subject: CN=6bf963f2-98e8-4e6d-b5d9-7ea41412a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:39:44:e2:23:ac:0d:d4:d0:19:03:42:65:
e8:05:fa:fc:ca:39:9d:a3:1a:f6:40:6a:10:cc:39:
48:2b:22:7c:82:8e:58:8e:bc:21:73:45:8b:f1:bf:
e6:ec:f7:b8:c3:4a:12:5a:42:41:58:a7:2f:8d:5c:
08:d6:00:a6:0f:bf:52:09:8a:92:16:db:e7:a9:92:
0c:a1:fe:19:8b:47:ef:ee:87:d2:5c:b4:ad:ad:5a:
89:97:59:0f:76:1d:5e:f7:c9:f3:6b:44:bf:0a:65:
83:24:0d:0d:14:32:03:ec:99:67:e4:2a:73:49:55:
38:f2:86:68:f6:41:f2:e9:35:78:2e:10:f8:31:a1:
84:65:a2:5c:9c:94:3d:80:47:d8:0d:85:fe:d2:50:
18:fa:f8:f9:1b:ff:ec:b8:6f:b5:61:1c:73:23:43:
d3:06:c3:92:bb:c7:a6:ae:fe:31:2f:89:fb:a0:a0:
9e:b7:85:c6:cc:0c:8f:10:7d:60:03:16:dd:bc:fc:
24:cb:99:0e:6f:40:27:f4:93:46:14:42:c3:af:b1:
8d:fb:01:9e:96:8a:1f:f9:15:c0:26:6a:08:1a:db:
b8:10:e9:92:17:3a:b4:2d:19:70:f7:05:ea:46:a2:
12:0e:6b:cd:ab:e6:3d:4b:f6:cd:91:87:c7:b7:aa:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:68:2A:32:14:33:9C:53:DD:B8:42:9C:49:F6:EE:6D:D3:2B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c3:08:06:49:6f:13:7e:34:5c:32:a2:d3:c3:29:ae:60:37:
8f:b7:28:47:54:b7:bd:d5:82:df:2f:93:6e:b6:cc:0c:38:ea:
9a:63:e7:f6:37:05:9d:f7:29:35:96:ac:f3:25:5d:e3:78:5d:
ba:15:bd:11:b2:b2:6e:7f:ab:39:0e:12:af:18:66:66:04:1d:
36:78:0f:0b:a3:35:ef:72:11:28:ba:3b:28:44:3a:1b:d9:64:
94:d0:1a:92:47:15:cb:9f:2f:1b:f8:d9:5d:10:63:a5:76:14:
ce:44:c5:61:bf:3f:0a:a9:0a:c6:8f:05:a7:8e:0d:f6:8e:e0:
41:72:87:20:81:cf:78:77:2a:f9:0f:b1:4e:25:af:2a:f9:e2:
97:e3:97:e3:b5:a7:67:6d:c0:a6:24:e5:b9:63:ff:2f:75:7b:
bc:58:a1:27:31:50:6c:84:24:64:47:b5:6d:3c:a4:fa:b4:28:
bc:f4:f0:1a:a3:e0:55:ef:aa:37:7c:b3:cc:08:dd:fa:2b:30:
2f:14:1d:4e:60:e8:75:7b:33:25:f4:5d:68:ad:90:19:33:56:
f6:69:e8:27:95:01:aa:8b:74:3a:c2:97:e0:a8:bd:41:38:e9:
32:58:e0:b9:db:ed:bc:1d:fd:94:7d:c8:4f:d1:f5:f3:8d:3b:
23:47:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:27 2025 by rpki-client