Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5158a879-dec2-33be-9e82-31f4c43665a2.roa
File: 5158a879-dec2-33be-9e82-31f4c43665a2.roa (raw, json)
Hash identifier: gvsqMCYvUM9H61rxAiRFr3LFvG9pP9rrMwiui0UyBEw=
Subject key identifier: 40:EA:93:6D:23:94:77:3B:C1:E8:C8:2A:6B:C4:63:39:49:85:CA:DB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60CD170C78C940A856F700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5158a879-dec2-33be-9e82-31f4c43665a2.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396590
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:cd:17:0c:78:c9:40:a8:56:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=894e8e3c-7d0f-4f16-a3bd-ca8c36e93d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:1d:80:bd:d2:b1:1f:7f:75:50:9d:b8:62:
c3:11:89:f0:65:5f:a3:c7:4a:df:e5:5b:96:35:de:
7a:61:1b:be:bc:df:95:1f:07:c5:23:97:60:4b:d2:
63:b4:b2:43:08:50:b6:5a:4f:3d:01:e5:92:ea:3a:
56:75:e9:4b:84:35:36:d4:50:4f:f6:ad:e7:d8:df:
f3:c8:a4:07:59:7e:e9:67:5a:0d:97:28:2b:73:0d:
62:93:29:55:5d:7a:17:f9:a1:b6:ef:ed:98:cd:50:
54:9d:44:98:c4:58:c6:e1:87:b7:a9:fe:85:b2:62:
88:aa:d8:15:3f:e9:b4:de:15:05:ec:e4:91:9a:5c:
44:78:da:aa:f6:6a:2f:0e:ac:c9:e7:c2:54:10:f4:
9e:6f:2d:8d:80:b3:99:d1:2a:d3:a6:b8:76:33:ea:
35:6d:b5:c4:95:45:45:ee:0e:2b:53:69:6b:8c:0f:
b2:a3:1f:2c:25:51:17:b5:c4:58:ae:d8:f8:14:94:
31:88:86:69:1d:8d:6a:66:ba:78:a1:ab:e4:18:76:
5a:f4:81:db:e4:03:e5:fb:3d:90:9b:fb:2b:27:62:
8d:42:23:c8:a6:d9:56:77:0d:37:b1:11:84:2b:49:
99:83:3b:8e:cd:3b:5f:8b:41:0b:93:48:6e:21:0f:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EA:93:6D:23:94:77:3B:C1:E8:C8:2A:6B:C4:63:39:49:85:CA:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5158a879-dec2-33be-9e82-31f4c43665a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:e0:47:07:66:da:b3:34:16:76:1b:f3:65:d9:a0:63:b5:6e:
7f:0d:43:2a:9f:f0:58:58:a8:cd:56:9a:45:ba:de:d4:a3:20:
27:c5:e8:7c:9f:02:bd:40:43:d8:da:8c:4a:89:7c:30:6e:8c:
89:38:56:55:82:2b:d1:ce:09:da:7a:d0:c7:b8:df:11:75:f2:
e7:43:07:eb:8e:01:84:d7:8c:40:c0:5a:c6:c0:d2:35:3f:09:
ff:78:e2:8f:f6:01:49:5a:17:1a:32:d2:91:fc:63:21:41:2f:
30:d9:78:1b:53:43:a3:5e:e7:26:d4:b9:d5:c5:5b:86:99:25:
ba:ce:d2:33:4d:6c:57:1e:2a:0c:4d:7e:14:9a:c3:12:ae:4c:
cc:7d:c3:80:e2:d5:04:3d:c4:f0:36:d5:a4:c1:d1:fa:ba:16:
a0:ce:04:72:28:46:e5:6e:2b:d3:9a:93:16:c3:1d:28:9d:7b:
9b:1c:86:4f:95:52:25:1f:9b:57:f3:60:70:52:c6:69:20:30:
52:03:6e:14:49:e8:48:a6:b2:ff:f5:35:00:2d:f8:e3:18:2f:
ef:df:58:0c:22:de:d7:40:0e:4d:86:69:51:db:3d:42:75:8c:
82:5c:a0:fb:59:75:08:92:dc:2c:1f:1c:a3:e5:b4:20:ee:18:
25:ff:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:39 2025 by rpki-client