Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa
File: 5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa (raw, json)
Hash identifier: 4hI7tM1vKb0p0h+hRTn/SRhNNqOCh8P0a2GKprxTBog=
Subject key identifier: E3:40:D0:D5:E9:C4:BB:F1:F2:77:66:CE:33:90:DE:28:98:B0:F9:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA5636F41EB76C3D8F3EB900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 27544
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:36:f4:1e:b7:6c:3d:8f:3e:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=16a0fcef-ec59-471f-bd39-be2c0eb1be56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:a7:99:54:65:43:42:83:65:09:cf:41:9c:
7a:19:ce:ec:25:26:e6:a6:d9:5a:df:cf:2f:6d:63:
0d:83:7c:02:1e:0c:d5:19:77:e2:28:b6:7e:8c:13:
e2:b8:e7:51:38:5a:05:76:e2:68:9e:14:7e:18:fd:
91:ae:0b:a9:30:85:10:d4:56:6c:a6:f6:65:ef:48:
19:a7:30:83:7d:f8:a0:d2:63:d8:89:07:62:9e:71:
99:2c:6f:41:6f:7e:01:4f:24:60:8a:fc:4a:d1:0f:
5d:28:4a:34:2e:a7:34:d5:47:9b:b8:90:22:38:47:
a6:86:1d:94:39:04:61:c8:19:b3:ed:76:f3:32:cb:
4b:e9:c3:84:1e:17:21:f3:1f:aa:f5:ab:d5:c0:f3:
9d:6b:fd:1e:92:8c:64:77:1a:d0:02:dd:96:a3:b5:
ea:10:12:22:fa:78:bf:43:98:45:76:67:28:9a:64:
f4:02:ed:2a:99:38:04:97:68:db:a6:d6:fc:da:a9:
eb:55:55:20:1c:27:91:fc:9f:b7:45:4d:87:ad:94:
b3:01:71:18:c1:e7:16:f2:06:1b:fe:6e:ab:ab:c1:
b9:95:da:09:76:11:95:d7:59:f4:42:47:15:bb:c9:
fa:8a:e8:a1:61:6b:bb:3a:fb:85:f6:18:9c:fd:e5:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:D0:D5:E9:C4:BB:F1:F2:77:66:CE:33:90:DE:28:98:B0:F9:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:13:4d:06:cb:b4:19:51:cd:8d:8c:59:fa:cb:f3:8f:22:85:
50:05:69:47:b7:06:ac:3b:ef:23:49:59:7c:44:af:a3:5d:13:
af:8d:c6:35:8e:3d:0e:48:13:31:32:7d:99:01:e8:a5:d6:3d:
30:c2:c9:6d:7f:4b:e7:e5:07:f0:fe:0a:f3:f1:d7:35:13:29:
45:a3:23:38:1f:81:f8:8a:4d:aa:02:d8:23:8c:33:df:29:60:
e0:72:fa:2f:9b:e3:f0:4e:78:b7:26:58:09:d8:f4:0e:44:3f:
5a:31:42:fe:7a:dd:a9:fd:21:cd:e5:2f:f3:cb:49:e2:c4:e5:
d5:2c:31:48:a5:5e:d5:ff:1e:49:b9:10:cb:cf:3a:ce:70:67:
ad:79:58:a9:ca:12:50:c6:85:73:ae:23:fd:ae:01:29:63:8e:
b0:fa:48:48:99:bb:e4:e5:47:98:77:4f:20:78:0f:46:e8:0f:
59:9a:33:c3:c4:a0:b4:d7:02:09:aa:dc:88:af:ba:9c:a7:80:
7a:b9:fd:99:29:f2:b4:01:3f:be:c0:97:42:2f:24:4a:e2:e7:
42:bd:36:4c:0d:24:0d:e5:fb:f2:c7:78:f3:2e:db:6d:b2:66:
0b:d1:f9:6b:f2:38:68:e7:4d:41:f3:2d:85:d8:f4:86:79:7a:
73:19:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:38 2025 by rpki-client