Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd496c7-9413-37c5-9119-31a231370c13.roa
File: 3dd496c7-9413-37c5-9119-31a231370c13.roa (raw, json)
Hash identifier: z0agbtrl32+t7CuPxIv63fECLOOrjRTC09GxqjDo0uo=
Subject key identifier: BC:F3:01:FA:97:5A:82:48:18:70:28:D1:9C:07:98:CA:E4:9C:64:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA56379C25B287A8D3C2BBE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd496c7-9413-37c5-9119-31a231370c13.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396565
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:37:9c:25:b2:87:a8:d3:c2:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=42a5fd7f-a042-4a1c-88dc-87f897f58ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:de:10:e0:75:c1:42:fd:c9:4c:63:47:cc:
77:4b:55:be:e3:18:ee:8a:30:6c:0f:5a:08:7e:75:
b9:ac:a2:f3:f6:6a:f7:a3:cd:2b:1d:4f:f2:82:8a:
6b:a9:2c:66:c5:75:32:09:89:d0:cd:fb:a1:fd:50:
7f:80:c3:30:d9:4d:b9:15:b0:c1:32:bb:0a:7e:ca:
e9:2f:ed:66:15:4a:88:f4:a8:a3:27:7f:62:d1:97:
fa:08:91:d1:74:1b:46:e8:7a:80:7a:ec:a3:08:a5:
0c:a8:63:ab:d0:b6:67:40:6a:35:b7:19:aa:0a:6e:
e5:c4:80:73:2d:1e:1b:83:c9:37:ed:da:32:d9:7a:
1b:8e:ae:58:8d:ad:a8:8e:ad:c6:32:3e:51:f9:05:
1a:5d:df:bf:05:b8:e7:82:16:51:c2:93:06:c3:6c:
7a:e5:e8:1d:8a:f5:1a:41:69:be:28:0c:6e:89:44:
f8:ae:17:14:31:1c:0e:1b:b9:1e:d3:8c:2a:eb:a5:
8a:72:ab:dc:e9:8d:d6:01:ce:49:5a:51:74:51:27:
85:5b:2b:26:66:87:da:cb:92:3a:a3:8e:d2:fc:52:
cf:ea:80:78:58:75:de:47:7d:be:26:6c:78:7e:2b:
38:f5:3e:2c:d2:2d:12:b2:3d:fa:fc:99:23:c6:d4:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:01:FA:97:5A:82:48:18:70:28:D1:9C:07:98:CA:E4:9C:64:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd496c7-9413-37c5-9119-31a231370c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:51:ef:40:a7:ea:f9:d8:fc:89:a5:ba:29:71:1a:78:13:8e:
31:93:48:c9:62:a5:35:eb:82:17:83:ab:20:23:4b:5e:34:1d:
5f:30:c1:2f:7e:4c:27:5d:48:1d:85:97:79:df:d2:bb:39:1e:
67:72:56:ce:12:fb:17:45:06:1f:fb:24:21:96:21:dc:87:d7:
f8:b8:a7:74:e5:73:b4:19:9f:0f:1e:9d:22:1b:c4:89:27:2d:
3e:1a:bc:b1:48:be:2d:83:0f:ee:1e:d1:fe:18:78:4e:10:e5:
3a:46:46:fb:d3:2c:11:a6:d2:83:d3:49:d1:e4:ba:ff:72:b7:
c3:33:b4:ad:03:30:ca:39:25:ee:22:1e:aa:d3:6b:8b:55:78:
25:02:d9:4c:dc:dc:f2:d0:c7:a9:19:28:54:f0:67:3c:de:be:
a1:15:ae:cd:f2:57:7b:3e:5d:d9:2c:91:45:63:8d:62:e0:67:
50:21:4a:d8:b8:a0:fc:cd:c3:27:18:fd:01:84:8d:a5:6a:39:
f8:f2:ad:1e:55:4e:6e:b9:9d:37:29:8e:69:b0:8e:97:1c:1f:
6b:10:f6:ba:8a:a0:3c:2f:16:08:b3:dc:ec:2e:90:08:78:7a:
b1:ae:6e:98:c3:90:76:3f:32:d8:38:47:95:f7:12:1b:71:3f:
8e:a9:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:43 2025 by rpki-client