Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa
File: df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa (raw, json)
Hash identifier: fHqX72cfRV65m6YoZlbnQ18vjUZ/pUwiTkxMkZ4Be2g=
Subject key identifier: 87:17:2D:06:F3:F3:71:1C:10:6B:8B:AF:40:E0:82:92:60:76:D4:E0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F6B05B5A8E4D63E57D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa
Signing time: Thu 19 Dec 2024 13:45:10 +0000
ROA not before: Thu 19 Dec 2024 13:45:10 +0000
ROA not after: Wed 19 Mar 2025 12:45:10 +0000
asID: 396587
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f6:b0:5b:5a:8e:4d:63:e5:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:10 2024 GMT
Not After : Mar 19 12:45:10 2025 GMT
Subject: CN=60781936-47df-4974-9004-3720a5571a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:7a:8a:b8:58:6e:2e:14:89:df:1e:71:61:
09:d0:2c:38:28:b2:aa:6c:02:6a:de:54:81:eb:78:
af:f7:75:54:a4:2d:5a:46:91:1a:1a:e4:4f:2d:9a:
07:31:99:44:b3:1f:a4:76:65:2c:a6:9c:27:8f:f8:
6a:66:ab:f1:39:69:0a:17:a4:97:fb:da:77:20:76:
fd:50:fa:85:12:90:be:bd:77:8e:99:15:88:26:c8:
b0:7d:59:50:34:d3:4d:c6:35:d7:de:6c:41:f2:e8:
ee:2e:85:ee:3b:50:9b:51:9f:30:7a:e3:10:37:b0:
e3:e4:fd:43:61:75:db:48:6c:0c:00:23:89:a7:3d:
83:e5:5b:03:ce:d0:e2:2b:73:e2:56:43:48:17:72:
6b:56:73:25:61:69:40:85:07:b4:03:4f:59:35:05:
d9:06:96:ec:f5:da:da:8f:a0:22:89:58:65:d6:aa:
33:08:76:4a:7d:0c:16:8f:a5:3c:cf:08:76:f7:b6:
5c:cd:d3:ac:55:7d:5e:94:a9:bc:f3:6c:86:28:91:
c2:1e:98:c5:63:b3:7f:eb:81:b5:da:c5:a7:d2:1f:
57:36:dd:4f:2a:3c:5d:50:17:71:61:be:47:55:ea:
ce:86:e0:8f:f7:39:86:75:b1:90:48:43:87:c4:f5:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:2D:06:F3:F3:71:1C:10:6B:8B:AF:40:E0:82:92:60:76:D4:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:0b:5b:8e:0b:02:6e:a2:a4:08:85:49:e7:22:7c:47:05:bd:
f2:fd:58:1d:0e:06:92:2b:51:39:9e:b8:a8:ff:8e:47:ef:74:
fd:fc:e8:be:a3:dd:0e:e6:1b:a9:5f:62:e8:bc:26:2e:85:47:
01:76:8b:82:31:bf:1b:14:82:f9:66:e9:3e:8a:dd:c5:74:8f:
3c:f6:d3:b1:0c:ce:74:df:dc:ff:93:d7:8d:76:9e:01:4d:a3:
4b:2d:5b:70:37:c7:08:a6:56:4d:8b:5f:15:0a:7b:9a:bb:be:
23:86:b7:c6:2c:df:86:da:c8:62:57:49:1e:cb:dd:b5:1f:ad:
0b:ec:ad:4c:cf:ae:4f:7b:de:cd:ed:5f:2f:c5:93:a9:04:f0:
f8:27:6a:70:60:21:67:13:00:39:f7:56:d9:7e:8f:e6:95:c4:
92:29:f9:b5:be:26:d6:fb:d8:45:ad:dd:ba:fc:a8:74:c9:ad:
b2:25:ac:bd:79:c8:f2:03:24:9c:d9:c2:4e:66:f3:c9:5c:08:
34:ca:67:3d:39:bd:2b:ac:37:5d:c0:5c:1f:9b:8f:7e:b2:d7:
02:fe:a9:a4:df:5a:61:82:1f:1c:ec:0f:38:27:42:d8:a9:14:
0c:75:8b:82:07:b5:1f:86:85:05:07:bd:41:35:01:e8:b1:a3:
db:31:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:15:00 2025 by rpki-client