Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cdf87d-0825-33ac-b1c5-6a9550f1aa6b.roa
File: c2cdf87d-0825-33ac-b1c5-6a9550f1aa6b.roa (raw, json)
Hash identifier: 1XfnqSUwWzouoXjPdYhujPDX8AfLn2HmRok8NGTJLng=
Subject key identifier: 74:7E:A7:52:6E:E7:20:58:6B:8C:05:C2:AB:72:BD:E8:3F:A5:EF:62
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242EFE0FF7AF043F647D300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cdf87d-0825-33ac-b1c5-6a9550f1aa6b.roa
Signing time: Thu 19 Dec 2024 13:45:06 +0000
ROA not before: Thu 19 Dec 2024 13:45:06 +0000
ROA not after: Wed 19 Mar 2025 12:45:06 +0000
asID: 396568
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:ef:e0:ff:7a:f0:43:f6:47:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:06 2024 GMT
Not After : Mar 19 12:45:06 2025 GMT
Subject: CN=539c9ca6-5dde-460a-9016-9546b9c9b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:a0:71:5f:61:74:27:9f:1c:93:a3:b3:8a:
d5:23:b4:d6:57:f4:11:f5:9d:5d:53:69:53:6f:da:
a8:25:29:88:5a:bb:70:60:d7:b8:41:6b:84:3b:d7:
80:f5:91:98:bd:49:55:a5:17:31:91:4e:54:6d:54:
d4:a7:11:6c:00:fb:62:c4:e0:e6:0f:7b:e8:cf:83:
b9:69:54:3e:3b:f1:23:1b:11:32:ce:5c:4d:48:07:
49:54:4a:ef:42:51:19:a8:54:02:31:1f:af:83:37:
bd:c4:94:3a:eb:36:d6:50:5e:33:c9:0c:98:99:d0:
f6:43:75:ec:a6:84:09:56:c7:a8:53:fc:a8:f5:c2:
0c:32:95:9b:dd:bb:e3:bd:a7:68:d3:8a:7f:eb:ad:
3d:54:ed:cc:4f:70:6c:99:2c:46:7b:ba:07:6a:74:
4e:e7:b6:3c:ad:58:af:50:1e:98:27:f9:86:5b:66:
b9:ae:83:6a:ff:f9:38:b7:73:9d:a7:57:92:d3:b0:
ef:95:65:50:9a:45:3c:77:e9:a7:53:65:3c:d2:4b:
7d:e9:db:68:c6:9d:fa:e7:f8:b6:52:b6:f2:13:1e:
9e:d9:88:36:e2:f1:51:d8:83:62:b0:05:10:50:04:
f8:15:11:a1:ee:1b:45:45:b4:01:4d:88:9e:c4:1e:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7E:A7:52:6E:E7:20:58:6B:8C:05:C2:AB:72:BD:E8:3F:A5:EF:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cdf87d-0825-33ac-b1c5-6a9550f1aa6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:9a:bb:59:bb:81:a4:9d:8e:ec:80:90:cd:c3:41:4f:8c:87:
94:45:ce:a8:e3:a5:74:13:92:e5:8b:f6:cb:5c:48:6c:e6:85:
a6:0f:47:7b:9b:70:1f:d8:87:83:c6:7e:8a:71:36:91:57:5d:
94:71:78:3c:ad:70:00:25:d6:a0:ff:49:5e:81:03:4a:0e:db:
04:f3:74:07:d1:1c:46:8a:b4:cd:4b:06:16:42:33:ad:32:cb:
4a:18:49:49:d2:c2:ba:e1:e3:b1:6c:c7:74:8e:24:82:05:74:
32:ed:08:84:99:09:aa:a8:82:50:77:9e:46:eb:70:b9:8b:87:
53:b6:7c:42:6d:27:6a:e4:78:0b:59:7c:dc:a8:62:62:06:40:
14:d1:09:e9:8c:4c:b7:df:c3:c4:01:f4:40:73:b8:dd:76:d9:
85:26:37:6a:fa:30:22:a9:a0:22:f9:72:25:39:d0:24:5a:ad:
ce:c3:4d:e7:c5:b0:67:7a:83:f3:15:eb:b3:65:50:83:d3:f9:
44:71:9f:53:71:15:62:6e:9b:ae:54:d6:08:f6:9c:a8:74:9a:
b5:7e:a9:ef:06:f8:f3:c5:ee:94:3a:48:d4:b9:7c:5a:d2:ed:
ad:8e:7f:48:b2:15:eb:28:3e:cb:db:f1:ca:93:27:46:c7:61:
73:98:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:07 2025 by rpki-client