Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22eeaa3a-2407-3880-9947-94d32cdf5047.roa
File: 22eeaa3a-2407-3880-9947-94d32cdf5047.roa (raw, json)
Hash identifier: pNw5Vq8zBafW4LeYqbD+PkN6uLN5rBFHLc/Iq9nYstc=
Subject key identifier: 65:DA:22:35:E0:7F:96:F5:AF:CC:23:B9:D3:BF:C4:13:5D:50:70:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA563BDDCE1E04C240561480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22eeaa3a-2407-3880-9947-94d32cdf5047.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 20431
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3b:dd:ce:1e:04:c2:40:56:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=506ceaf3-0a0d-4d9e-9da1-3ff052c75555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:98:97:58:0b:9d:c7:2a:4c:05:31:bb:80:
57:fc:c5:de:54:07:66:f4:4c:ca:d9:d5:7f:78:ce:
01:23:e9:53:f1:1f:43:3f:3c:3e:d7:98:f6:3c:4c:
fa:ad:ee:53:02:4d:93:1c:2f:e5:22:52:fd:9e:eb:
79:6c:16:35:ac:7c:02:5f:87:52:86:d9:5d:f1:c3:
ea:c5:0a:89:d3:58:4f:ab:9c:70:3c:e7:e3:bb:c5:
bd:9e:50:79:d5:df:13:96:d6:ef:fc:be:85:c2:0b:
f3:5f:a1:b0:fa:18:25:70:43:2d:55:48:53:16:54:
75:83:79:2b:45:ad:a2:bf:17:67:02:04:3e:9a:5d:
af:b9:30:f4:64:68:33:a9:71:a3:e1:ca:ca:d4:f9:
ee:ab:70:51:ec:01:06:30:77:a2:ae:6b:37:a0:e9:
09:22:b5:56:36:44:29:a4:83:5f:9a:ca:a3:89:b3:
7f:a9:8e:e4:4a:79:ad:6f:c0:f8:d5:4f:bf:63:f1:
ef:18:18:72:7b:43:30:4b:0f:47:5b:14:d5:50:91:
de:54:7c:2d:95:42:20:16:88:2f:45:69:dd:ad:1d:
f8:e8:15:de:13:a5:0a:94:b9:56:6f:72:9d:4a:a7:
60:ce:1b:ca:72:3d:6b:1f:a9:49:41:33:22:99:db:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DA:22:35:E0:7F:96:F5:AF:CC:23:B9:D3:BF:C4:13:5D:50:70:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22eeaa3a-2407-3880-9947-94d32cdf5047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:80:9f:7a:ab:d6:41:40:ef:98:59:41:bb:cb:a1:73:d6:e4:
a6:74:98:36:bb:38:3b:89:52:a5:83:95:a0:f4:e5:53:d0:be:
5e:8e:fb:32:39:d9:c0:59:3f:9c:10:f3:d0:21:60:ad:27:f5:
9c:43:b2:57:6c:a1:fa:a9:e5:97:e8:06:ef:7a:bd:1f:79:f2:
8c:79:62:ae:d3:f0:b1:10:f9:50:b5:4e:a4:e0:6f:68:85:ec:
d0:0a:52:32:8a:bf:26:75:46:ae:ed:af:73:bd:b5:dd:7b:02:
f0:9e:86:c4:9a:7e:6a:b8:fd:07:ae:18:ca:f6:d1:e2:fd:18:
f4:ab:18:22:c6:c0:de:c5:32:b7:9f:55:a9:75:b8:c3:f0:0d:
7b:a9:06:f3:27:40:1f:42:6e:b9:b5:dc:27:40:ad:27:1b:e7:
4d:b1:a5:dc:a0:2a:30:4a:df:ea:88:ae:af:1e:8c:30:7a:ea:
dc:cc:e6:92:f7:4a:cf:6f:c5:98:78:36:ad:4c:f5:de:91:06:
e1:fb:f7:87:cc:62:2e:43:c9:f8:1e:d6:23:56:4e:88:63:63:
05:39:02:e1:91:b4:1f:e2:8f:73:46:31:76:85:41:b0:bd:63:
57:05:20:e5:75:0e:86:c4:6b:bb:36:32:a0:5f:4b:a7:73:8b:
03:7d:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:34 2025 by rpki-client