Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d8f56d-487d-380c-bc70-d58fec63705a.roa
File: 35d8f56d-487d-380c-bc70-d58fec63705a.roa (raw, json)
Hash identifier: lWxwz7szAyWlVVpLiXm1hLOJd348ql11gR23Tt2fwB0=
Subject key identifier: AB:78:FC:C8:72:85:E3:1C:62:ED:CE:1D:FC:12:1D:F5:22:EB:B5:8A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB988B9027A021805AECB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d8f56d-487d-380c-bc70-d58fec63705a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396553
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:98:8b:90:27:a0:21:80:5a:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=ea595f08-9049-4d29-9c57-079563a857b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:b3:15:11:90:c5:d4:d7:60:0d:47:21:64:
89:25:29:26:3c:b5:a0:44:40:90:6e:99:97:f2:26:
af:e2:1e:54:22:78:36:1d:97:9a:46:66:4c:05:2e:
53:7c:27:3d:78:2a:88:84:10:dd:bd:f8:3e:67:58:
4b:6c:d6:91:fe:db:d8:f7:91:44:63:05:69:e5:a0:
f7:86:c1:78:8f:c0:29:ee:ac:87:4e:9b:a0:bd:ca:
c5:f0:9c:6e:7c:d7:11:b9:64:17:fa:db:b6:04:bf:
a3:9b:59:c9:96:2e:9d:68:79:90:8f:6b:7f:b7:77:
a8:9a:1e:18:e7:6e:1e:04:6b:e6:b9:92:85:12:b3:
8d:aa:e6:04:33:95:6d:d4:37:95:49:11:15:18:72:
51:b4:41:8e:31:c4:ec:39:86:74:bd:a9:42:d4:3c:
26:ca:c9:49:c8:2c:f1:85:83:3e:80:d5:ad:25:ca:
57:d8:4f:66:d4:85:ed:04:34:5a:6d:f1:b6:93:5f:
03:6c:9f:b1:b6:30:db:67:13:c1:d1:85:ab:dc:4d:
d3:18:93:3d:d4:8e:f2:41:c0:31:24:1d:ad:1c:9a:
40:da:ee:a8:db:5b:21:40:9a:0a:c4:c2:2b:f3:69:
b5:a5:a7:6b:20:57:51:d4:d5:0d:47:86:94:dd:c0:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:FC:C8:72:85:E3:1C:62:ED:CE:1D:FC:12:1D:F5:22:EB:B5:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d8f56d-487d-380c-bc70-d58fec63705a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:5d:f5:2d:f6:dc:3b:5b:88:d5:10:8f:5e:52:6a:37:21:73:
b2:62:5c:37:f2:41:f0:a8:f0:49:08:0e:31:d1:93:f0:af:ac:
e6:cf:78:c6:d4:5a:e2:11:b1:74:ec:f2:70:b6:5c:54:0f:7c:
28:b0:ad:fa:07:fd:e4:67:0a:35:bc:42:de:0a:ee:d2:eb:75:
11:35:02:bb:55:82:ee:2a:07:47:82:29:8d:41:44:05:8b:12:
b0:f3:73:1a:fc:38:03:45:67:b3:b5:24:e8:72:01:1a:c8:ca:
ac:5d:5d:94:0f:8e:1c:85:71:ce:7c:10:fe:01:13:9f:df:56:
33:0a:be:8a:9b:20:07:24:86:9d:46:e2:08:84:b4:5a:94:03:
cd:ae:d6:b4:3d:e6:a9:f2:d2:89:3b:cc:2c:27:9e:71:00:00:
bd:67:d8:5d:37:2e:e7:76:81:57:5a:5c:60:91:5a:21:78:ce:
d5:b6:33:69:3e:1b:70:ea:08:ac:a4:2d:ea:20:04:89:5f:fc:
b3:3e:40:b4:29:a0:a0:b6:f8:99:f1:35:1c:09:3d:f5:de:7f:
2a:08:1a:93:c8:27:f3:7b:06:e6:77:4b:98:ec:84:aa:ae:c7:
3f:c7:ba:e3:43:f9:1e:61:b4:9c:64:9c:27:0e:da:b3:9a:27:
c3:a7:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:57 2025 by rpki-client