Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa
File: 470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa (raw, json)
Hash identifier: v/be2OFQn7gOvGepCtZ1R74lY6I+FFcrVzuSbBx2PF8=
Subject key identifier: 76:F6:16:0D:1E:90:8C:BE:5D:53:9B:9A:A3:C6:54:A2:A4:2F:4A:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60CF9FEE8DA8CD57E27FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396587
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:cf:9f:ee:8d:a8:cd:57:e2:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=0761ad6f-9867-45be-b124-c4606c8ff156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:0d:af:10:3b:f7:d7:8a:6f:8e:ae:85:5e:
d3:8e:01:13:f8:12:8d:59:ee:02:b1:f7:23:6c:f2:
99:ed:e6:e9:66:4b:67:64:c1:43:fa:5c:e8:91:c8:
fe:e6:ac:6a:e3:b6:34:f6:ee:22:15:f7:30:5d:77:
fd:5c:0a:d1:35:bb:8d:c5:5e:4a:a4:aa:58:ad:7f:
28:e9:28:89:52:80:97:4f:00:7e:dc:b2:56:98:3f:
6c:df:e1:1e:17:12:f2:cf:f9:bc:13:f7:8b:b4:a7:
58:0c:6e:87:53:e1:e7:24:68:4a:cd:33:52:d4:16:
b6:38:de:d5:a5:b7:91:64:bd:30:54:5f:22:9b:ea:
40:92:18:4f:34:ee:33:0e:b7:4d:9d:9c:f9:2b:73:
71:7e:a5:d0:a9:a9:38:7c:91:96:bd:0c:f4:7b:b1:
5b:3d:97:7d:0b:10:6c:b4:a1:3e:ae:d6:81:49:ed:
d8:f7:65:75:f9:dd:ee:98:18:73:66:f4:e7:f9:b9:
ad:83:27:a0:56:30:8c:3c:fb:85:bf:5a:bd:45:63:
6c:b5:82:62:2e:61:14:5b:57:82:dd:0a:06:90:45:
38:87:51:d1:1b:d0:b2:5a:44:07:b9:e5:12:13:68:
4a:ea:ce:91:d5:90:83:04:0c:01:5f:f4:e9:5e:c0:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:16:0D:1E:90:8C:BE:5D:53:9B:9A:A3:C6:54:A2:A4:2F:4A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:36:1d:c8:fc:5b:e6:b3:03:97:97:c1:b6:4a:08:e2:ad:27:
fc:93:6b:f6:76:df:89:e1:cd:cb:bf:74:e2:c2:78:82:47:64:
09:11:21:9b:ef:27:ea:67:68:25:6a:71:5e:d0:dc:5e:86:3f:
73:a7:b5:47:82:86:72:ab:62:8d:c8:e6:b5:80:0e:a5:78:6f:
86:74:7e:04:1b:d3:29:82:97:cf:1f:d2:a1:82:fc:57:56:46:
7d:95:01:0c:d9:ed:45:60:bf:28:72:f5:3e:d3:25:af:3b:06:
7d:b7:87:a6:4c:9c:e2:77:c9:c9:07:72:e8:b4:72:e3:0b:00:
60:92:0c:43:8f:b5:1c:81:ad:23:e8:bd:2c:fa:3c:16:b0:9e:
3a:d3:cc:3c:c9:c7:f2:e8:27:ca:6a:12:61:d8:d6:46:74:db:
ca:46:f3:25:c9:ea:1d:98:f5:b9:80:b7:ec:de:e4:0b:09:ea:
93:f5:80:29:ef:10:7c:6d:65:1f:c5:e1:4a:0e:a7:56:f0:28:
45:75:b4:31:1f:32:13:8b:33:d6:38:f8:6c:12:7c:ab:30:c1:
df:bb:de:90:e5:bb:e9:96:b5:b5:db:bb:d4:f0:74:c4:d4:7e:
09:c7:cb:fe:e9:02:c5:93:55:52:1c:88:53:78:5e:0b:1f:96:
0b:b1:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:35 2025 by rpki-client