Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa44815-998e-33f8-b0d5-31313fc7c6c4.roa
File: 3aa44815-998e-33f8-b0d5-31313fc7c6c4.roa (raw, json)
Hash identifier: T9tGtc1EE6UiRYWUece7HejwN1fyU1qFGd1gubtFANE=
Subject key identifier: 48:AF:E2:C3:8F:96:DF:0E:FD:AE:94:5D:D1:91:68:A6:8E:DB:35:27
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA563AC94B85C93D81F2DD20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa44815-998e-33f8-b0d5-31313fc7c6c4.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396590
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3a:c9:4b:85:c9:3d:81:f2:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=363ce6a3-6794-4645-b50b-bb9e1e398511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:84:55:fa:ba:cb:18:14:01:16:fe:f2:3a:
12:16:1e:4d:61:b1:55:5a:fd:50:3c:84:09:3f:e1:
dc:15:63:d7:c7:cf:3e:b7:dc:0c:f8:b2:90:d6:f1:
28:b4:dc:67:71:38:ac:21:ed:c6:fb:6f:eb:7a:d6:
df:16:0a:95:62:56:9b:4b:01:43:e6:36:6b:ed:09:
3f:db:94:96:0b:30:d9:e1:08:7f:e3:e6:fe:b3:fd:
59:0d:6b:4e:ca:9d:f0:aa:b0:f3:b1:e1:c6:d7:df:
0b:dd:25:ff:57:69:1d:2e:91:b0:99:12:b5:59:52:
86:60:0d:e9:49:7d:de:64:97:21:0d:99:d5:43:06:
be:0e:0e:e5:5f:dc:31:3b:bf:3c:ac:82:7b:06:1c:
a6:1f:ad:01:37:c2:b3:b4:34:9b:d4:49:2c:29:be:
42:f1:82:49:aa:12:93:14:55:57:02:a7:ad:b0:1a:
70:3e:e6:a4:41:fd:93:c4:fc:b4:2c:a6:be:7c:a2:
d3:d7:6e:84:60:ae:4a:b6:3c:7b:03:60:33:59:64:
6c:61:8a:56:1f:5d:41:96:24:7b:22:75:ed:4f:6b:
2f:33:e9:be:82:fd:6b:e3:62:51:79:47:16:02:d1:
2f:3c:9d:e0:3c:ce:ea:4b:07:90:98:82:bf:29:8c:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:E2:C3:8F:96:DF:0E:FD:AE:94:5D:D1:91:68:A6:8E:DB:35:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa44815-998e-33f8-b0d5-31313fc7c6c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:6f:88:ca:5d:aa:a6:c7:4a:48:a9:46:29:c9:9e:c4:02:28:
d0:37:ae:07:4e:b6:1f:ad:f2:30:ac:c6:d4:74:0a:f7:1d:02:
98:dc:1b:b2:25:cb:53:4c:11:97:98:15:66:51:28:e6:3b:77:
37:c9:1a:3b:15:f6:73:02:8b:22:35:0c:d5:d4:21:6f:44:a1:
7c:77:eb:9b:5c:84:42:31:fd:7d:a3:42:53:cc:72:9f:4c:a2:
e7:db:09:38:8d:54:3b:49:c3:7a:5a:b3:c6:a7:fb:d1:75:9e:
3a:eb:99:bf:d2:28:0b:de:3b:ba:bf:1a:a5:0f:7f:0f:b2:76:
e6:b5:45:f2:83:af:ec:2d:c5:08:16:f8:53:f5:d2:7f:93:e1:
e0:35:3b:cf:3a:0d:1e:f5:e0:50:17:f4:47:ba:d9:88:1b:e8:
5c:af:31:f3:d5:74:c6:de:ec:29:ac:23:1b:45:4b:e0:fd:8f:
1a:c2:c5:4e:94:d1:0c:07:c8:a2:1d:57:75:2c:2e:25:8e:6c:
dc:a1:67:b7:08:c7:80:05:2a:b9:ab:d6:75:da:71:fe:55:11:
af:32:2e:ff:26:ea:1c:d8:f5:18:b8:8a:70:05:a6:03:d2:48:
df:4e:a9:f5:f7:29:15:a2:74:fc:e4:c9:33:04:f1:3e:a7:0c:
05:7a:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:13 2025 by rpki-client