Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7a2c92-8670-354e-8e84-9cbda0190f0b.roa
File: 1e7a2c92-8670-354e-8e84-9cbda0190f0b.roa (raw, json)
Hash identifier: nreynGccUnXpWPKo2xUAUW3RuYgeSr8PiDLOl22kQJ8=
Subject key identifier: 63:C5:2C:46:52:79:70:A5:C8:AC:90:AD:17:F1:A9:2D:52:38:42:E2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA56392C3BF9BE22C64B2340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7a2c92-8670-354e-8e84-9cbda0190f0b.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396580
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:39:2c:3b:f9:be:22:c6:4b:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=9c048803-734e-451b-8048-efd6e83761b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:14:ee:2f:f3:69:3f:40:a4:61:93:b7:eb:
4a:55:f1:9f:d3:02:8a:d9:48:07:89:25:b6:3f:71:
2e:34:1b:23:e9:2c:53:f0:da:df:a6:3a:91:00:d0:
f6:b5:c1:d0:0b:33:8e:47:64:36:44:88:e9:a6:43:
16:bf:c0:ca:db:52:91:4e:70:bf:a6:d0:26:a7:8a:
af:85:83:f5:c8:f8:36:a7:f0:57:4e:aa:28:3d:c9:
79:73:6e:68:36:5c:3f:81:4f:09:7e:1b:85:cd:75:
a3:8a:77:96:90:56:a2:70:69:4a:10:b7:0e:da:6e:
7d:10:be:f1:45:96:b7:b7:15:96:e4:ae:ae:93:47:
2e:4e:0e:4c:73:8e:4e:47:3b:26:f2:c6:a0:67:91:
f3:42:75:50:86:40:0b:ac:d0:78:b2:a6:c8:e7:44:
66:f1:02:3f:45:36:95:2d:86:a9:45:2c:4c:70:22:
7c:51:89:88:34:c7:a7:61:7d:d4:6f:9a:38:3d:d6:
d8:1a:47:27:2b:bd:4a:b9:33:f4:01:0a:29:a2:5c:
23:11:ad:5d:cd:23:96:ee:69:89:b5:e5:95:ca:c6:
66:ce:b8:b2:1a:f0:67:d2:1d:a6:02:e2:e4:46:86:
61:2e:99:0b:30:26:1a:8c:ba:57:c8:1d:e7:ee:ed:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C5:2C:46:52:79:70:A5:C8:AC:90:AD:17:F1:A9:2D:52:38:42:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7a2c92-8670-354e-8e84-9cbda0190f0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:67:aa:0b:27:8d:03:f7:1a:bf:2b:d9:98:84:b4:d7:e7:d3:
75:78:df:0c:d6:1d:fa:4c:b8:f7:33:d7:cb:d5:9f:d4:3c:5e:
73:a1:81:49:81:5b:b9:57:98:e1:cf:53:77:70:fb:f1:df:4c:
e0:d3:a5:45:b0:aa:3c:26:df:95:cc:0b:85:26:1f:3f:b7:9a:
3c:59:53:d3:53:ed:43:dc:ed:24:f8:67:47:6f:b8:d5:95:b8:
66:6d:b7:b9:f9:d6:53:b6:dc:0c:b9:0c:c3:41:76:f5:12:cb:
6e:7b:18:3f:c9:a4:ab:86:70:f4:25:74:f5:5b:95:71:e2:44:
12:ab:c8:a1:d1:0f:c5:52:20:de:7c:d1:d2:03:93:99:c9:a0:
ab:78:d6:14:3d:7e:1b:c9:4e:ac:3c:78:b8:29:dd:5c:e5:f9:
7f:69:76:0b:02:dc:f0:19:5b:1f:d4:df:6b:86:67:88:d5:9e:
17:3a:a1:47:09:5f:e0:3d:a8:a0:28:be:b4:71:4b:1a:f6:dd:
96:b8:36:6e:e4:e5:ad:df:f5:12:76:56:fe:e2:c6:80:b1:3c:
d1:d6:e4:9a:6d:31:56:0d:a0:cf:aa:f7:14:09:01:75:38:83:
9a:c9:89:73:f2:cc:c4:04:3b:dd:7c:8d:e7:9b:d8:d4:25:f9:
58:d0:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:17 2025 by rpki-client