Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0612c72-a459-3e61-af8c-ec01d06504c5.roa
File: b0612c72-a459-3e61-af8c-ec01d06504c5.roa (raw, json)
Hash identifier: pX5aNzyqDrh+QewstOUfAwRia59zi4AjoyqboWZmDEk=
Subject key identifier: 9E:5B:22:AC:93:1F:84:1D:CC:95:7D:F3:BF:58:7B:84:BE:70:DF:5F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424336AD9BA0BC9811F2F800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0612c72-a459-3e61-af8c-ec01d06504c5.roa
Signing time: Thu 19 Dec 2024 13:45:40 +0000
ROA not before: Thu 19 Dec 2024 13:45:40 +0000
ROA not after: Wed 19 Mar 2025 12:45:40 +0000
asID: 396563
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:36:ad:9b:a0:bc:98:11:f2:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:40 2024 GMT
Not After : Mar 19 12:45:40 2025 GMT
Subject: CN=0e67067a-f0be-44cb-97e1-63b13cd7e4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:e5:3a:04:d0:27:43:85:09:5f:f4:21:1f:
c9:ce:69:b5:d1:c4:b3:90:d4:5b:ed:55:79:83:45:
58:39:b1:16:22:85:eb:c6:52:e5:08:ea:06:61:d1:
94:41:6c:d7:0f:94:ac:d6:25:39:9e:b1:88:15:6e:
1f:65:68:4b:e5:58:ce:5a:e0:f3:2e:33:82:12:3a:
2f:db:d2:54:9b:a7:24:45:23:e1:fe:1b:d0:56:ad:
20:dd:99:82:ee:bd:e9:e4:63:2b:22:88:87:a6:cd:
f2:e2:1d:f3:9f:f3:fd:87:0e:d9:43:53:b2:00:92:
d9:7f:26:88:a7:dd:af:4a:a1:ef:84:d4:c5:05:59:
38:af:db:f0:d1:e7:26:33:2f:55:b2:49:5d:81:7b:
99:d0:de:09:ad:7d:24:00:4f:87:6d:bf:b9:e8:8f:
c1:fe:42:ff:41:3a:1c:e2:ae:6e:c3:02:d2:6a:ab:
95:c4:5c:cb:9f:c1:73:7e:2c:70:82:09:b1:bc:90:
bb:4f:fb:ca:e2:5b:c2:a5:ef:ce:f3:aa:e8:4a:54:
85:49:62:31:f5:13:7f:a8:9c:02:90:ea:b6:a8:55:
94:6d:aa:c1:53:92:47:6e:6b:41:94:f6:71:90:f2:
a3:b2:3f:24:c9:22:be:c1:e5:93:7a:14:5b:99:cd:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:22:AC:93:1F:84:1D:CC:95:7D:F3:BF:58:7B:84:BE:70:DF:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0612c72-a459-3e61-af8c-ec01d06504c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:0f:28:83:cf:57:05:19:5a:f5:25:02:2a:8a:07:73:6c:e0:
6a:37:cf:ce:09:96:83:fa:e2:05:1f:40:cb:6c:f5:dd:6e:d3:
91:58:d2:fe:35:a5:64:3f:c1:b7:92:d2:68:9e:40:f1:10:74:
68:ea:16:a3:b7:30:b2:98:82:fb:69:7f:a5:1f:50:bc:24:8d:
85:a9:f9:95:e4:79:f2:12:c3:0c:e7:85:af:0d:60:e1:e0:12:
f4:14:fc:92:3a:3d:90:fd:0e:df:c7:0a:e7:23:81:a8:64:54:
2e:14:58:96:c8:b9:1a:bf:b2:bc:8b:f8:f5:2b:94:a1:fa:e7:
49:6a:4e:6e:b1:ba:98:b3:46:b3:cc:7e:c9:61:e4:6a:05:85:
25:e6:89:f8:b1:9c:1b:ab:97:ba:72:f8:29:89:b6:3b:5a:aa:
7f:d2:a7:a4:9a:e5:44:f0:b7:9b:16:6d:22:3a:5d:e2:21:93:
dd:19:6e:bd:d2:53:26:03:68:eb:5e:eb:36:e2:aa:d3:ee:cc:
b3:3d:53:98:b7:15:ac:69:b3:d0:38:88:57:8a:b0:63:f1:43:
8c:b1:d2:0e:37:d9:89:11:1b:c4:b6:78:cb:0a:dc:29:b2:42:
8a:2e:17:22:b2:f6:fe:85:14:a8:08:e7:d1:2b:58:d4:b8:12:
f6:8e:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:01 2025 by rpki-client