Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa
File: a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa (raw, json)
Hash identifier: FhAmOef+FbSfT+Vdg1Cuee730x28I00tvc0jCAR3ToA=
Subject key identifier: 9B:74:8D:A7:A5:9B:AB:26:5D:35:00:97:36:4F:88:E5:24:A7:A9:43
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB97957C1BF6231B869900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396606
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:97:95:7c:1b:f6:23:1b:86:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=d2427bf1-e067-4604-823e-3a909f57bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:0a:53:b3:ca:22:2c:82:b2:38:29:59:92:
05:fc:c0:b4:c2:b1:0d:2a:9c:da:89:1b:31:c5:da:
76:f7:2b:f2:77:0d:82:23:25:cf:a7:b4:18:c5:f2:
3c:25:f4:38:8b:61:53:b5:24:c2:be:a6:0f:41:81:
25:10:9a:ab:a6:8f:d4:60:8e:25:6d:a0:95:ba:3e:
0a:01:71:6d:60:d0:32:c4:5c:9b:9d:ef:5d:5e:8c:
16:db:cd:02:18:2a:9c:f6:60:c6:bd:ab:16:22:12:
1b:df:af:df:f6:2d:85:20:92:1c:3e:79:3e:52:e6:
9f:a8:af:f3:ed:bc:85:4a:cc:b4:64:ef:67:c8:f1:
7e:1c:90:ee:0a:06:6b:34:76:68:8c:cc:0c:49:e7:
83:5b:8e:2e:2d:60:eb:d4:cd:f0:60:a0:3d:45:89:
a2:c5:c0:c2:e1:4e:57:01:be:ed:1d:e6:47:95:9a:
b0:36:f4:69:ad:67:4f:f6:19:8f:22:2a:74:06:8b:
5b:76:87:27:b9:13:d1:e9:18:30:6d:bf:26:c9:f4:
31:5a:32:4a:cb:87:f5:90:79:5d:1e:9e:48:7b:09:
c2:ed:6e:de:b4:d3:d8:80:5a:41:aa:7b:e6:9f:94:
f3:d2:f3:9b:21:dc:3a:f6:2d:f8:2b:35:cb:86:2c:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:8D:A7:A5:9B:AB:26:5D:35:00:97:36:4F:88:E5:24:A7:A9:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:9c:dc:ca:f6:c6:86:93:16:f7:b5:c2:be:15:be:12:c1:ad:
d5:38:85:90:2f:4b:85:ef:98:4c:f4:b1:18:5f:d4:21:b9:43:
6f:bd:d0:70:eb:91:f4:b5:61:3c:5d:a6:e2:d7:e3:cb:8f:c3:
c1:dd:ce:bd:99:ed:3e:76:3a:ac:c7:b7:b7:1e:b6:21:52:f1:
62:0b:50:1c:50:2d:20:ae:61:25:f7:54:ef:89:f9:c6:d6:81:
d9:ce:d7:e8:52:4f:47:bd:56:32:c3:2b:01:70:a1:68:30:db:
35:95:fd:2f:5d:7c:5f:34:41:96:9b:31:c0:c4:f6:84:35:60:
72:e7:9c:8e:eb:5e:e5:c1:c5:74:cd:c1:89:bd:d8:d5:49:bf:
00:3d:11:2c:71:30:de:dd:b6:8f:41:4b:4f:79:bc:2b:e1:59:
95:89:8d:46:e1:6c:9d:c3:5c:06:c1:d1:30:33:a4:31:63:9d:
f8:e3:28:08:86:50:03:16:04:64:92:66:8a:b3:3b:b6:40:1c:
67:e3:8c:3d:20:54:85:67:eb:ee:a7:ab:bf:b7:49:de:1a:fb:
45:a7:69:a2:e5:da:81:75:84:30:e5:c8:19:d6:a8:27:7e:96:
e2:12:f8:a8:55:fd:8d:f1:4d:8b:8e:05:1a:fa:6d:3b:64:cf:
da:d8:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:57 2025 by rpki-client