Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
File: 9f9e87a5-daf1-38e1-9600-8596d3062364.roa (raw, json)
Hash identifier: AsYBN6Uf/e/t+exC1zBSU8+ek/NOZjw9bbmJhhYPEiM=
Subject key identifier: A1:5F:34:C4:ED:8E:3E:E2:EF:64:7E:E5:F9:FC:44:48:1A:B9:43:49
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9C96752832F81641C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396597
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9c:96:75:28:32:f8:16:41:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=78f3ee71-f032-4625-8a0d-122c68632c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:e9:6b:67:94:6c:94:04:86:7a:82:b9:d9:
5b:cd:37:aa:be:a0:ac:51:57:9d:41:76:a8:78:aa:
0d:74:88:dc:83:14:a9:54:ba:eb:91:aa:e5:5c:30:
ab:2b:b2:71:a2:f8:f3:d5:9d:6e:de:f4:8f:1f:5d:
77:b0:a8:e0:5b:58:db:30:bd:42:79:91:b6:40:2e:
a3:74:80:e1:d1:bd:a4:2f:ba:78:d1:e5:71:b7:8d:
90:7d:9b:36:ac:30:16:35:55:10:8a:06:1b:05:e1:
e6:62:72:57:4d:12:64:a1:aa:e1:5d:20:7a:30:66:
d7:5d:cb:3c:f4:66:ba:f0:3b:43:96:f3:6b:6c:7f:
5e:2d:28:dd:ae:62:45:60:b1:64:f1:d7:0f:07:fb:
c2:81:5a:76:4c:97:88:48:93:a3:5a:5b:58:08:72:
5f:de:d9:82:0b:b7:d4:b6:bb:98:44:c1:89:af:40:
f5:f9:33:cb:3e:78:6c:0b:ba:7f:45:0a:5f:c8:1c:
67:09:8b:a2:7e:72:7b:a0:7e:ee:54:2e:95:6e:d2:
81:6b:4d:0a:d0:c4:c5:74:f0:96:fd:1f:0a:0e:42:
03:38:f6:87:d2:5d:e6:7c:c1:ef:60:2e:52:ee:62:
1f:0f:04:a2:bb:9d:64:f1:e3:fe:d5:d5:26:fb:7c:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:34:C4:ED:8E:3E:E2:EF:64:7E:E5:F9:FC:44:48:1A:B9:43:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b0:df:af:ce:bc:ac:bb:d2:5e:c0:14:b8:27:aa:e2:86:44:
ed:de:c9:03:6c:e1:2e:b8:0e:75:f1:d0:eb:fe:e0:2b:74:4b:
29:d8:80:b6:12:0c:a5:1f:b0:9a:15:a3:cc:ed:63:78:f9:ca:
18:69:05:70:f0:c0:3b:14:0c:70:c6:56:58:c4:fa:33:b4:d3:
dd:61:ef:94:20:a9:62:c0:c7:20:8a:0d:5b:fe:76:24:1c:68:
e5:72:35:b3:5e:b4:38:6b:04:d8:04:f3:79:8c:89:e9:0d:a6:
a9:0c:18:a0:5f:39:4d:ec:f7:ad:e8:1b:b6:21:c0:e0:04:b4:
18:76:df:c5:e7:ac:bc:d6:20:ef:c8:67:10:bb:72:1f:6d:78:
26:2c:ea:bb:d1:5c:e2:c5:4a:1d:b4:aa:b3:79:01:13:a6:41:
ff:0e:ad:b7:44:45:0d:f2:f1:42:4e:35:27:91:5a:17:e5:3c:
77:39:a3:ca:ec:79:6b:83:d1:e3:66:9c:64:5a:8c:9b:8c:72:
4b:85:86:88:f7:35:85:f2:e8:0c:37:83:1d:22:dd:fe:84:82:
61:fd:df:62:30:38:2b:3f:3e:9e:ff:ca:6a:01:7b:a1:63:28:
8b:30:77:f1:67:3d:93:92:8d:a9:e0:78:a6:34:5f:27:96:3f:
3a:26:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:28 2025 by rpki-client