Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00a32b6-8c40-3d9c-b81f-c39a58101621.roa
File: a00a32b6-8c40-3d9c-b81f-c39a58101621.roa (raw, json)
Hash identifier: uzzghyPhpHPs+hPwAMhIMJaTuNVsb/0ZGHoUg8uL/7A=
Subject key identifier: 45:11:6D:BC:A6:A7:CD:ED:69:75:35:3B:B6:F5:A3:45:6D:1B:71:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F2096713F81541D90C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00a32b6-8c40-3d9c-b81f-c39a58101621.roa
Signing time: Thu 19 Dec 2024 13:45:07 +0000
ROA not before: Thu 19 Dec 2024 13:45:07 +0000
ROA not after: Wed 19 Mar 2025 12:45:07 +0000
asID: 396571
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f2:09:67:13:f8:15:41:d9:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:07 2024 GMT
Not After : Mar 19 12:45:07 2025 GMT
Subject: CN=2e8ca54c-4a33-4af6-bf2c-1ff975e75144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:80:02:4f:0f:06:39:53:9a:66:28:ce:22:
80:61:1c:e3:0d:51:74:00:33:47:26:09:83:6f:b1:
9e:b1:1a:c3:77:03:e0:ed:de:f6:06:32:69:ce:0c:
29:87:dc:08:a3:2b:3a:5a:2f:a7:da:0e:a0:71:69:
d9:dc:0a:fa:6c:09:1e:e4:c0:7c:62:e5:3d:a1:c6:
44:18:21:80:e1:18:5f:84:40:bc:d5:45:ef:41:6d:
2d:16:01:33:5e:37:a9:57:ba:dc:c8:4f:e9:5c:ee:
73:ca:45:3a:2c:64:3b:cd:2c:d4:a6:8d:3b:96:73:
69:6c:00:ab:44:4a:4b:7a:c6:93:f4:73:1f:d2:6f:
ad:71:c5:c7:b9:52:d4:1b:86:d2:fc:e8:db:93:f7:
02:3d:01:15:8e:1d:04:70:50:51:91:bf:4b:68:9f:
07:50:d8:f2:94:e6:82:07:f5:87:fc:2f:51:08:72:
3e:e6:44:bb:73:a3:26:ec:f4:6b:fc:78:2d:13:d9:
e5:07:98:3a:c9:c8:29:6e:84:57:ca:9e:73:9a:30:
e2:2d:25:67:be:51:82:e5:0c:b0:30:be:be:2e:50:
f6:56:fb:20:91:e6:ed:bb:ac:0d:55:d1:d0:c3:c7:
8b:f6:2c:a6:0f:e8:47:c4:27:1d:07:e8:8d:49:13:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:6D:BC:A6:A7:CD:ED:69:75:35:3B:B6:F5:A3:45:6D:1B:71:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00a32b6-8c40-3d9c-b81f-c39a58101621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:dd:76:7b:51:ea:5f:56:8d:b6:76:f8:60:75:48:90:49:3b:
3f:2b:b0:86:64:9d:0f:fe:3f:36:10:01:3a:64:a1:74:e2:16:
62:26:a2:c7:7b:82:dc:cb:c0:94:17:e8:62:89:dd:9c:96:64:
d5:de:5b:a5:da:0b:21:dc:c9:82:5b:be:7b:3c:a1:3b:f0:1e:
b9:ff:8a:20:a9:9d:be:42:d3:aa:37:44:5a:f0:93:11:7a:e2:
0d:e9:ad:fa:00:56:c3:ec:eb:49:6e:36:ea:e4:b5:dc:92:ad:
a8:24:84:22:78:5a:85:3a:6a:7e:b8:c2:9b:2b:71:27:30:01:
cd:95:f9:67:74:78:3f:a8:d2:e8:76:ec:77:f2:79:70:72:2c:
36:cd:4a:b2:93:9d:95:b2:b9:2e:65:dc:75:27:e3:4b:82:7a:
c5:6c:b8:77:14:22:36:67:7e:d2:ca:7d:04:02:fe:8d:92:3a:
ac:b1:95:2c:47:cb:a3:65:db:f7:6f:45:a5:19:f9:9c:b0:bd:
d6:72:51:58:3f:a1:05:8a:c9:31:b4:ae:96:88:3c:3e:42:76:
42:63:8b:04:96:58:12:c1:ee:04:7a:9d:8c:1d:1f:c9:2c:1f:
bb:e3:45:92:1c:9c:9b:a8:5f:8e:98:33:65:4e:27:99:29:bc:
ac:22:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:04 2025 by rpki-client