Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d764c6d2-ce09-3153-8be5-f5fb8dbefae7.roa
File: d764c6d2-ce09-3153-8be5-f5fb8dbefae7.roa (raw, json)
Hash identifier: XGJjIXZi6rbNU4VUaMd5jdAb8+I1qutJaUIavSnWaac=
Subject key identifier: 1A:E6:5C:E3:9C:37:86:A2:FA:E8:1A:E9:14:5E:6F:A4:05:E7:B1:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F2599AD8FF31F20E76C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d764c6d2-ce09-3153-8be5-f5fb8dbefae7.roa
Signing time: Thu 19 Dec 2024 13:45:08 +0000
ROA not before: Thu 19 Dec 2024 13:45:08 +0000
ROA not after: Wed 19 Mar 2025 12:45:08 +0000
asID: 397195
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f2:59:9a:d8:ff:31:f2:0e:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:08 2024 GMT
Not After : Mar 19 12:45:08 2025 GMT
Subject: CN=07bdcf58-7a37-4b7f-b6fb-bdcfc022f2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:6c:d1:99:3e:4b:25:ff:60:4a:ae:62:3a:
e7:df:68:70:5b:70:fb:41:12:03:be:99:20:95:86:
cb:ab:a1:a9:f3:4b:32:02:e2:71:65:8c:bc:bd:e0:
4b:6c:5a:da:83:d5:42:05:e7:a3:d6:6b:21:32:7d:
09:7a:15:32:a5:36:72:a8:ed:04:07:c8:1c:20:50:
81:3e:be:5d:9f:ea:21:e9:40:69:b8:c8:47:73:75:
1c:5d:8a:f6:90:f8:61:0b:06:65:fe:8c:f1:20:bd:
fe:12:b5:92:2c:e2:51:f5:19:d5:0a:e9:5d:b0:34:
b5:b0:0f:5f:e0:3b:03:fc:75:4f:d4:14:d7:d3:d2:
24:f3:62:f4:59:ed:7a:99:9b:81:cd:fb:5e:fc:71:
98:32:f2:1c:fe:68:02:b7:fe:9b:35:c6:18:31:c8:
c4:7e:fc:ca:2d:f0:0f:d6:76:ed:db:1e:fa:a4:0e:
d7:f2:cd:61:7e:ea:ae:81:03:4f:29:b5:28:32:83:
c2:43:01:d1:72:cf:2d:50:1d:aa:88:4d:63:85:de:
48:48:bc:03:d9:39:68:96:b5:b8:4f:c6:f5:1b:a7:
32:bc:69:10:50:4b:86:d8:23:07:19:0e:2c:73:58:
dd:86:7a:d9:45:63:16:ad:a8:e4:bb:72:0b:38:f4:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:5C:E3:9C:37:86:A2:FA:E8:1A:E9:14:5E:6F:A4:05:E7:B1:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d764c6d2-ce09-3153-8be5-f5fb8dbefae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:2c:9d:35:f3:1c:23:3b:f7:dc:dc:32:e5:2e:0a:bb:84:67:
07:22:3c:9e:0f:c8:96:bb:f9:b0:bb:04:d4:7f:38:0b:cd:a5:
58:87:11:b1:ae:65:9e:6b:3c:2b:77:84:8c:8c:bf:cb:df:93:
0f:62:99:c9:c2:4b:52:7b:42:b5:7e:7b:f4:fc:0f:05:24:19:
ba:fc:8c:8e:89:fb:89:f7:0b:fd:c5:7a:f2:a8:1e:c9:61:51:
71:b0:ef:19:73:19:bd:95:7f:1f:df:18:ff:3b:22:f3:3a:d2:
a7:26:f0:d8:a6:7f:82:4f:95:8a:d1:12:0b:6c:aa:3d:d3:42:
d8:66:f0:ef:65:75:7d:21:6d:fa:88:45:21:54:d7:9d:5f:f1:
35:75:1d:74:c2:79:1f:e6:cb:85:cb:c5:3f:94:e5:ce:e5:e8:
34:d9:ac:68:bc:bc:f8:69:42:9d:24:6c:32:16:89:14:c9:51:
26:67:0f:9b:f1:c1:98:ab:ec:bf:8a:69:37:97:dd:ea:c6:1f:
bf:7e:ee:a8:43:7e:be:bc:ed:82:49:a3:13:ee:b5:f2:54:f5:
13:e6:02:ad:e7:d7:dc:05:70:99:f2:5d:fe:d9:c9:08:f9:e4:
b5:45:d9:0c:fd:ff:f3:5c:03:9f:90:85:ff:d2:84:40:95:2c:
4f:10:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:59 2025 by rpki-client