Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/046cfb43-1ed3-3d49-9e0c-ec981b6d30b9.roa
File: 046cfb43-1ed3-3d49-9e0c-ec981b6d30b9.roa (raw, json)
Hash identifier: KTErSJQvmiEzh/V8UTV1qav9i1v4ggEkN6InXbhMtaU=
Subject key identifier: EF:34:E5:8C:8E:8F:DE:24:FF:79:DB:0F:AE:30:7C:AD:B0:45:87:C0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9EAE98156AA450532580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/046cfb43-1ed3-3d49-9e0c-ec981b6d30b9.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36629
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9e:ae:98:15:6a:a4:50:53:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=41856f93-6ff4-4afe-a645-c038ce0946a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:5a:86:dc:2b:e4:bd:4e:9a:be:bf:ec:36:
9a:db:9f:37:bf:d0:b4:59:35:21:bb:9c:a2:5d:f8:
ac:43:58:51:e9:1b:1b:e1:1f:b8:3f:20:59:12:66:
ab:45:3c:0c:48:bc:61:e4:0e:d8:ea:6e:b5:10:0d:
07:be:9f:6e:4e:09:c3:b7:5a:a2:cb:9b:57:9a:3d:
b2:50:54:ef:78:74:45:6a:2e:b2:a4:79:18:4b:71:
9f:32:4a:97:31:7e:50:76:77:16:bb:30:38:24:9e:
3b:09:24:4a:de:91:f2:01:fb:e5:d8:9d:42:2b:67:
6e:bd:d9:2a:88:a6:32:a7:47:24:31:19:0d:20:a7:
31:db:37:63:3d:69:cb:ec:62:a3:60:e5:09:10:28:
14:cb:28:1e:da:73:33:03:0d:cf:dd:4e:03:4f:39:
aa:bc:5d:23:68:67:0c:02:31:fa:13:08:cf:e4:e2:
6d:44:0d:82:69:ea:e7:97:ea:7a:22:f5:26:18:53:
0f:aa:b1:a4:bc:9c:7f:85:d0:91:5a:44:ff:75:10:
34:ca:e4:4a:88:57:3c:15:bb:9e:9c:1d:5c:cd:b1:
a1:5b:de:bf:02:16:59:91:7a:f4:32:5e:e3:cb:0c:
d1:e2:4e:66:3c:d8:ae:b2:c5:ed:23:3f:93:5c:c2:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:34:E5:8C:8E:8F:DE:24:FF:79:DB:0F:AE:30:7C:AD:B0:45:87:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/046cfb43-1ed3-3d49-9e0c-ec981b6d30b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ef:d4:44:e7:31:19:2f:fc:6b:1f:8e:40:e1:07:b7:f8:d0:
98:67:07:9f:fb:48:88:e6:f5:81:f1:8d:15:ed:0b:88:8d:4e:
d5:7f:b5:5d:6f:6f:f8:f1:d9:fe:98:89:02:81:12:cd:39:4f:
be:70:e6:76:47:90:7b:22:73:76:b8:32:40:26:fd:78:da:39:
29:77:a0:ac:0b:c1:b7:8b:35:8e:e2:77:a6:9b:d7:35:35:dc:
9a:8a:35:00:98:f7:dc:ef:44:3b:24:d0:ac:4b:4b:5d:4e:13:
5c:6c:39:5d:1c:bf:f0:95:69:27:1e:be:2c:33:a9:e6:7d:1f:
2d:2e:8c:4b:a8:7f:f8:dd:36:ec:61:03:c1:3b:f7:6d:be:c9:
dc:ec:39:27:61:e8:76:34:50:ef:df:47:ca:d8:9d:b0:0d:93:
9a:67:e7:c6:db:16:b8:4b:9e:46:05:d8:10:f7:f0:ee:41:6c:
41:ea:17:4e:d1:ae:2c:ec:7f:24:89:17:98:a4:b5:70:39:cd:
94:a8:99:e1:a7:d1:9f:40:ea:77:67:e4:22:0c:9a:83:45:c3:
38:59:d6:08:f3:bf:c5:cc:29:f9:aa:07:6e:a2:93:b0:30:d5:
c3:2f:87:d8:fe:3e:dd:bf:28:fa:95:35:7f:4f:be:34:3b:55:
8d:38:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:22 2025 by rpki-client