Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f652f12-1f12-317d-be7d-c15bfecc83d3.roa
File: 4f652f12-1f12-317d-be7d-c15bfecc83d3.roa (raw, json)
Hash identifier: dP4BYurUmL8sFijLsX0PvyHh7nby4Uzhbdgxy6RGQWE=
Subject key identifier: AE:D2:3F:09:D1:78:3B:35:4E:3A:D6:67:31:66:3B:CC:D3:DB:B1:C5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB989AC9DA25EF4CC12480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f652f12-1f12-317d-be7d-c15bfecc83d3.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396826
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:98:9a:c9:da:25:ef:4c:c1:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=b55234be-8cd0-466f-8936-c6b1da928125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:70:6a:dc:e2:fa:d5:38:71:91:62:be:0e:
e5:a4:7a:69:e9:50:eb:da:6e:2d:cc:d6:c5:b8:af:
54:2e:47:33:ae:ba:3c:b8:56:0f:1a:8d:ef:20:e9:
a7:1d:92:a3:1d:ea:ef:b3:eb:7a:b4:d9:1d:fb:70:
35:69:3d:91:0f:36:00:43:c9:cc:8e:03:95:6d:93:
19:9f:bf:2d:67:de:a5:85:96:b6:31:b5:1e:ba:cb:
1e:bc:d8:98:8e:48:60:21:f1:ba:06:2e:f3:3d:df:
cc:c8:f9:0d:2c:12:16:12:b3:be:78:1a:77:b5:a4:
8e:37:46:60:a1:d2:78:f5:b9:1a:0b:51:2a:69:d1:
23:81:03:d5:fa:68:2b:8d:05:25:06:d9:fb:72:50:
88:45:d2:2d:16:e8:cf:59:12:5e:43:a3:eb:7a:dc:
4a:79:90:9b:4d:a9:96:bf:82:1c:e0:b0:ff:58:4a:
71:78:a7:7a:8f:2b:e6:41:c6:bb:db:bb:6d:ab:77:
b2:6d:cc:d6:d4:18:eb:62:69:c3:ea:ac:13:4c:41:
d1:d3:3f:fe:13:42:88:90:f2:2f:b4:1f:0f:31:b6:
f8:7f:da:56:fc:70:68:a2:81:6a:e0:be:3c:77:63:
e9:f2:d4:cc:1b:ca:4c:b6:31:b1:e5:bb:7a:e8:7f:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D2:3F:09:D1:78:3B:35:4E:3A:D6:67:31:66:3B:CC:D3:DB:B1:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f652f12-1f12-317d-be7d-c15bfecc83d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c0:fa:a8:80:de:14:63:f5:5e:ab:5c:13:4a:0f:fd:22:aa:
ac:72:a5:00:9e:a6:5d:5b:0c:b4:56:87:ac:5f:34:7f:5e:34:
28:c0:d4:eb:b0:d3:d0:8c:ee:42:af:db:68:8f:a8:88:05:ae:
4c:02:b4:2b:45:fd:e5:6c:fb:6e:48:22:d4:08:44:49:7d:28:
79:ec:b8:9a:ff:6a:b5:a3:03:5c:b1:e9:70:b7:51:18:39:b2:
08:94:cb:53:79:60:71:ab:a5:db:bf:1b:a4:b4:ef:40:4f:43:
51:22:a5:0b:4e:f9:4b:bd:95:b8:37:29:4a:db:99:d8:bf:5b:
58:86:e5:8d:ac:ae:be:a5:b3:8b:21:b2:6b:91:29:e9:36:3b:
f4:f8:e6:d1:37:d3:f6:14:39:3c:53:c4:02:36:6a:07:28:a7:
40:55:da:38:57:6d:4e:ff:e4:c3:aa:31:f9:d6:00:5d:d0:d3:
48:f7:d6:03:04:3f:ff:8d:a3:8e:6f:4b:cf:61:9d:87:3b:3f:
b3:a5:19:a5:d7:1f:13:9b:be:6e:f8:c5:02:e2:e4:1b:2e:23:
b5:c8:67:24:f3:b2:de:ae:b6:d0:a9:e9:00:6a:09:48:42:e2:
9d:d2:f3:4a:84:1f:ca:1d:33:1f:41:82:9e:91:e9:fd:5b:b5:
ed:f8:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:35 2025 by rpki-client