Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa
File: 14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa (raw, json)
Hash identifier: 57f6xRdKDmhh0m9JFpFZEGh0o+7VWctKgjRlSFw/noM=
Subject key identifier: D1:32:04:1A:1B:F1:11:E2:F0:D7:74:41:24:65:E6:F3:D7:84:82:64
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA563B1DE54D9C1B3243CE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 397197
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3b:1d:e5:4d:9c:1b:32:43:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=3cbf48fd-d7dd-44d0-99c8-bec0c6900bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:54:13:de:c7:62:9f:26:6f:57:6f:97:d0:
32:35:94:65:fa:9c:a4:4b:69:a8:f4:7b:ed:f5:0f:
00:6f:7a:78:94:a0:da:37:57:ec:13:b5:54:ab:51:
e8:1d:6e:d6:6f:ef:e0:d0:16:24:2e:b6:4f:30:cc:
7a:2e:ed:aa:75:83:06:75:13:3b:31:43:8a:ae:d9:
3d:a8:a0:26:70:03:42:82:5b:c6:de:ae:86:74:63:
67:ee:da:47:9c:d7:b4:6c:1d:19:bc:4a:d8:ba:47:
a4:ab:9b:44:9d:8a:cf:bf:1c:bf:9e:91:52:32:79:
13:74:49:67:33:5c:06:5e:9b:ce:ce:59:5a:8e:3e:
c8:c7:5f:33:a3:73:0c:a1:1f:f6:d9:9d:ca:07:63:
38:db:d9:14:8e:83:23:01:39:e4:dc:21:80:e3:99:
10:c7:1c:f2:db:be:0a:8f:30:6d:7d:29:43:bf:f2:
94:88:07:9c:44:59:54:dd:ce:a0:2d:9d:ba:4a:9f:
23:d1:eb:5f:cb:47:f5:33:af:c2:9f:0d:71:50:f5:
42:4c:63:1a:a9:dd:9b:15:f4:17:8a:df:96:d1:4d:
9c:8b:00:e8:cd:d4:31:67:fc:b1:01:b2:ce:ab:76:
c7:ba:2e:01:d8:c3:2e:de:2f:2e:f3:93:e3:a1:11:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:04:1A:1B:F1:11:E2:F0:D7:74:41:24:65:E6:F3:D7:84:82:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:42:0b:7a:d2:52:2a:99:69:ff:c3:88:ba:94:71:52:2e:6b:
b3:3c:7d:e1:fd:b8:a8:96:50:c8:27:b4:30:75:ab:46:c7:be:
99:6d:62:54:1e:1a:9d:70:2d:bf:d0:74:0a:c6:e4:b2:2b:a5:
e1:db:af:2d:a2:64:99:80:85:d1:dc:c5:83:1b:d0:e7:8f:36:
fb:6b:a8:93:57:2f:78:06:cf:1f:17:6c:8f:06:79:be:d5:4f:
6c:7f:d3:50:16:d1:c4:8f:55:52:b5:2b:ea:9f:78:a7:8f:02:
d2:2b:16:7c:01:eb:64:7f:2f:5b:99:a0:60:76:c1:88:95:24:
ef:d4:f2:36:61:ee:e1:ae:92:db:66:18:99:e2:8f:42:c3:51:
79:0e:cd:a6:59:34:2e:fa:4f:cb:f3:26:fe:60:f1:d7:d9:3b:
ff:cc:76:f9:68:03:1f:90:ef:3e:2b:9d:48:e4:09:48:34:6d:
36:a2:d7:eb:5b:86:ff:9a:85:4b:67:b8:b2:3b:d1:19:4d:5a:
e8:cc:46:be:79:d4:aa:a2:8f:10:06:64:68:12:ff:7a:78:df:
e1:ea:6f:8d:ab:f3:c1:d1:89:57:1e:23:62:b9:ea:a5:a1:42:
5e:55:88:6a:9b:f1:9e:d7:e7:f3:10:8c:09:93:ed:c9:56:26:
ad:04:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:08:29 2025 by rpki-client