Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa
File: 59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa (raw, json)
Hash identifier: mI8pgTtOd7Hww/XlpVP34A7jSuMslDEwbLsBcNOcvIE=
Subject key identifier: 69:C5:E6:6D:02:A3:CB:0C:19:2E:4A:C5:D5:36:08:A3:55:51:52:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60C7666AEA5452E5F43280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396572
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:c7:66:6a:ea:54:52:e5:f4:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=861be2c7-ff52-4896-a5f2-4aeecd78225d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:42:d1:d1:a9:2b:f7:95:8b:ea:3e:2c:58:
ef:55:c5:13:96:19:8c:4a:d9:3b:e9:19:15:c0:e3:
06:cf:8e:24:1c:77:71:0f:93:19:b7:2d:72:ba:66:
44:b9:9b:d6:fd:66:32:0b:89:a9:f5:a0:a4:15:51:
79:42:bf:cf:64:dc:75:db:92:c2:86:10:fa:ea:3e:
22:d0:ad:de:a4:1d:40:72:94:60:21:1b:68:53:82:
51:34:b8:3a:42:59:68:43:b8:fe:f4:8e:b2:7a:5f:
d8:78:c8:aa:26:03:bf:2c:91:08:74:90:2b:ea:cc:
ba:28:08:00:65:b1:3c:a0:58:64:5a:bf:3b:32:90:
19:ec:8b:bb:d3:ce:57:73:01:98:91:99:f5:cf:27:
e2:5c:23:69:61:08:2d:f8:4b:28:86:27:8d:bb:41:
d7:3e:5b:a1:45:ae:8f:63:1d:66:86:4f:04:f4:b0:
49:2b:37:b3:b0:92:47:a2:9c:32:30:76:92:e7:c5:
47:28:f7:ff:5a:37:c8:c5:4b:4b:5a:83:ba:8a:0d:
00:99:f4:be:4c:ce:4f:d3:3d:d8:a1:bb:f3:4c:87:
7c:b8:18:c7:99:17:da:c7:95:86:c8:dc:fc:a0:7d:
e9:5f:04:84:f2:a1:82:c1:ba:89:d4:55:29:ff:5f:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:E6:6D:02:A3:CB:0C:19:2E:4A:C5:D5:36:08:A3:55:51:52:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c3:78:d1:79:72:fd:02:e5:88:c9:99:84:25:0a:e3:ae:92:
ef:8c:ad:94:5e:dd:e8:09:5b:d3:53:8d:18:c9:ec:9a:1b:2f:
c1:e1:9a:31:b2:c5:67:1a:46:0d:77:c6:ae:6a:ce:1d:88:37:
28:36:5a:da:60:39:c9:0c:ee:b9:1c:05:7c:61:ed:4a:7e:4e:
d7:70:9a:e9:4e:2f:f8:9b:d5:ba:1c:52:03:92:d7:c0:45:2a:
91:ac:f2:97:b5:84:0c:b1:49:46:6e:04:bf:ff:a7:a6:db:03:
3b:c2:f7:ad:25:98:e1:73:40:95:06:65:63:d2:9f:70:11:b6:
1e:d4:b4:da:10:d1:7a:7d:3f:73:aa:70:7e:9c:bf:eb:17:32:
16:2d:8c:f8:12:1f:cb:be:b5:e7:b0:9e:10:04:70:83:00:1e:
be:c0:39:db:4e:cb:3d:68:d2:87:c4:f1:7b:6b:39:06:2b:c9:
90:b5:b9:c2:e4:c9:ae:9b:02:a1:36:81:ef:ab:f4:98:72:fb:
de:b1:5a:ab:5d:58:29:b3:87:4e:22:20:f1:1b:9b:09:36:94:
ad:1e:87:ce:a3:4a:a6:27:a7:39:9c:31:a5:a8:3e:cc:9a:77:
18:83:79:46:03:88:69:e4:84:56:be:bc:20:88:99:3e:86:60:
20:3b:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:58 2025 by rpki-client