Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
File: 5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa (raw, json)
Hash identifier: US1yhAs57tj5k1sn0Ws8vsgnmcSG8u9S1lc/1peK/EU=
Subject key identifier: B8:96:89:13:BA:2A:B6:82:C4:8F:C5:DB:2C:65:C5:8C:E9:94:9A:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9A29C16E7CB10D73F600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 397205
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9a:29:c1:6e:7c:b1:0d:73:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=36a7b3a4-4d97-486e-bd19-1831f9311c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:42:8a:fe:29:86:89:6d:ab:cf:0a:19:f1:
6c:09:08:26:dd:b8:a9:71:a6:9f:e0:49:58:8a:b1:
89:8b:76:e2:45:43:32:eb:f9:f9:a1:7e:7d:b2:87:
a7:00:db:ac:c0:0f:b1:a2:ef:28:b3:e1:ea:df:7e:
0f:f8:39:46:a1:b8:46:0e:bd:e2:2a:e2:b9:1a:09:
2c:48:3c:13:51:dc:b5:c5:16:db:c8:f0:cc:e2:d9:
ce:d5:be:12:f6:2d:32:ed:64:84:45:93:e4:20:6d:
25:77:30:d7:fc:37:84:91:9d:e5:37:6f:6b:82:28:
6c:36:ca:27:39:aa:84:1e:9e:8e:df:aa:b5:b5:13:
8a:87:70:39:8d:eb:be:13:bb:99:df:46:c9:ad:a7:
42:bd:79:9b:86:3a:19:35:fb:4b:3c:78:71:e7:1b:
33:62:96:80:3d:91:f8:76:b6:8b:6e:c6:2f:02:3c:
76:c3:a2:84:18:9d:9a:ce:c2:8a:4f:e0:01:97:c4:
c9:98:0b:da:c9:3c:c3:d2:3e:10:3a:76:c2:e2:ef:
9a:ce:5b:22:26:54:49:8d:17:94:a5:3c:f4:74:8b:
c4:24:a9:a1:83:d5:1a:a5:6f:0d:2d:63:da:e6:27:
c7:9f:f8:38:bf:10:dc:40:d0:13:cb:27:c2:94:9b:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:96:89:13:BA:2A:B6:82:C4:8F:C5:DB:2C:65:C5:8C:E9:94:9A:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c8:ad:99:6f:9b:60:fb:35:56:f9:06:fa:e3:93:57:f7:66:
06:92:f5:04:d6:60:06:28:1d:52:e8:9a:ec:a2:3b:14:0a:40:
61:16:91:a5:df:30:04:96:2d:19:6e:1e:3a:b6:3c:85:d1:b4:
1c:40:07:2e:34:00:ef:6c:db:3c:00:6a:4f:4d:3e:70:90:4b:
0c:56:da:d7:6c:05:3f:83:82:96:cc:98:7a:f2:05:f2:0f:f3:
9e:fd:1d:95:44:d9:22:00:0b:8d:0b:71:bf:89:58:6f:77:c0:
b8:f3:94:1f:ae:61:64:51:f7:28:7b:dd:a4:c5:b9:0d:b7:db:
85:33:28:82:71:4f:3a:ff:01:da:53:e4:a4:03:ec:86:dc:ca:
71:a2:f5:59:58:6f:ab:23:ca:62:79:d9:87:fd:1e:2a:29:a8:
a3:06:6d:cf:da:b0:62:60:dd:75:4a:52:a7:79:f8:d2:aa:50:
22:bf:ae:f0:f6:dd:47:18:21:a7:45:c3:13:f8:9c:90:9d:41:
ed:76:2f:e7:97:ea:29:27:9d:d1:03:a5:1c:70:3d:91:db:c7:
45:e3:ee:15:6d:e6:dc:12:d9:35:e3:9f:3c:46:7c:b7:37:ea:
a1:80:0a:6d:87:0e:e2:90:1b:7f:31:3e:03:5d:0a:1f:32:c3:
38:de:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:29 2025 by rpki-client