Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54e64cdf-3b94-377b-bc8e-cfac754f322c.roa
File: 54e64cdf-3b94-377b-bc8e-cfac754f322c.roa (raw, json)
Hash identifier: CthzPDrDaE9Od08tGBZ3QAIgB3Kidg76lMGs13jp/H8=
Subject key identifier: A8:03:2C:5B:70:A3:FE:30:6C:02:EE:3B:87:73:7C:E8:DC:4B:20:36
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA5637CB4FB8D6E9E4FB63A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54e64cdf-3b94-377b-bc8e-cfac754f322c.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 36617
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:37:cb:4f:b8:d6:e9:e4:fb:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=98fe91e9-e83e-45ff-b4f8-ff57edd95000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:40:fd:7f:ec:20:00:2d:65:bd:4e:56:13:
8f:1e:0f:c5:16:e0:92:b1:29:e0:57:ed:e1:b1:73:
b1:17:76:cf:91:19:0c:37:4b:df:fd:71:2c:10:36:
cd:bb:37:10:72:ee:1d:96:2b:33:ac:de:04:ab:bc:
5a:77:69:a7:3e:4a:fb:ea:99:1a:b0:8a:99:50:25:
b5:d8:c1:e1:8c:89:38:39:f7:88:5c:35:06:e0:be:
53:5b:0b:32:57:3d:c0:4e:a2:5a:f9:36:a3:fb:8a:
63:a3:cd:86:76:36:65:c8:d6:cb:dc:66:23:8f:18:
3a:f3:e1:44:85:ae:ca:ac:6b:83:6c:f5:47:de:76:
1d:9c:83:33:9e:4c:4d:7d:9e:fa:c1:3b:9c:b8:66:
1d:26:5a:1d:df:e4:ec:1c:58:0d:c7:52:2e:4f:3f:
a7:3d:ff:8b:9d:8e:72:b9:89:9e:c4:d7:02:dd:2b:
c2:2f:d9:89:5a:64:dc:c0:c7:d3:bd:90:44:cd:75:
06:c8:66:d7:18:b6:88:27:b3:74:12:29:c9:c3:74:
9d:05:9f:3c:0c:85:65:e3:fe:1a:b5:a3:bf:28:1e:
7f:91:c8:15:34:da:25:c4:e3:be:3b:d7:20:55:7f:
1c:8d:d8:0a:69:b5:9c:c8:53:a1:05:a3:ae:63:fc:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:2C:5B:70:A3:FE:30:6C:02:EE:3B:87:73:7C:E8:DC:4B:20:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54e64cdf-3b94-377b-bc8e-cfac754f322c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:23:5d:a5:d6:60:47:43:e4:7e:78:73:eb:19:2d:45:b1:73:
fe:b0:b4:55:32:75:da:13:ed:52:35:c6:2d:99:03:b5:ee:20:
b6:47:6e:46:0b:60:ce:fa:20:02:90:16:d4:5d:c8:74:2b:6f:
36:ec:95:a4:e2:26:f2:57:c9:2a:85:92:41:fb:34:8f:10:2d:
3d:c9:de:11:72:31:86:78:64:c5:cb:aa:fe:2d:8b:51:60:ff:
c5:4b:2b:1c:42:a7:d5:68:96:63:f4:22:07:f9:53:e6:29:03:
ae:e3:b4:d0:85:f1:72:44:73:9a:97:01:8e:f7:e9:77:d8:c0:
79:49:d2:0d:3e:aa:bc:5d:f3:43:b0:22:47:c3:5f:3d:3c:8c:
ac:4a:f7:58:02:a2:ce:84:eb:80:4f:7c:a6:64:7c:73:73:7d:
c3:cb:03:47:ce:e0:06:79:3a:af:c1:1a:29:a4:cd:3b:a3:4c:
ae:bf:b4:5e:22:82:10:78:f4:06:4b:75:74:8c:aa:ef:17:ac:
29:25:90:cb:ed:80:6b:40:67:45:8e:20:69:16:ba:fa:f1:03:
f3:27:b9:00:7a:ba:48:9e:ec:2f:7d:5c:ee:4a:a6:b2:84:be:
cf:ce:78:12:a3:0e:37:c1:4f:ba:bb:19:6e:ba:d2:d5:c6:6a:
ff:07:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:47 2025 by rpki-client