Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
File: a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa (raw, json)
Hash identifier: x5zOzFYAPmsC9mTrGG16asOaqOV+feD1toas9WjoUcs=
Subject key identifier: D1:F8:7D:9F:3A:C1:73:C6:A2:06:1E:6C:7E:B9:5E:E7:D6:6B:B9:46
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB99857BADA9CF9E426E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396563
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:99:85:7b:ad:a9:cf:9e:42:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=8b729c68-fa0e-4c93-98a2-90379d0e0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:8c:8a:45:8f:7b:48:ee:bb:f5:da:9c:fd:
61:eb:95:20:c1:d6:66:f8:c6:6c:13:ab:7f:4e:7e:
af:6c:2c:0e:fe:57:f5:fb:cd:93:7e:ff:88:9b:c4:
eb:ef:d3:9e:b4:0f:79:60:70:a7:1a:c1:74:63:34:
58:be:b8:97:92:3a:4e:bc:60:2f:af:88:f0:2c:52:
9f:8a:1e:cd:87:ba:4b:e5:9b:21:ef:60:c6:40:10:
5f:8e:f4:a6:93:53:05:9a:30:50:71:29:57:fe:1a:
8a:ec:32:7d:97:8f:3b:e2:07:a1:4f:0c:e0:ce:4a:
1b:89:38:f9:86:5a:2a:f8:c4:e8:c2:e9:59:23:fa:
a6:a4:c5:d8:df:fa:b3:9d:92:b0:66:3d:d7:67:6a:
f8:2f:0e:f9:d3:f1:1b:c7:fe:00:84:cd:42:ea:07:
46:cd:be:79:51:e7:85:a9:05:4d:b1:a2:0e:cf:04:
b1:00:97:96:42:da:a0:07:b5:e0:f4:07:cf:d0:d5:
51:d6:e0:8e:30:8a:ba:64:f9:0c:73:c8:a0:3e:ad:
9c:e7:79:8a:90:d5:d7:b3:92:5a:b9:52:1e:84:a5:
bc:05:02:58:23:81:24:fe:96:e6:9a:11:7f:7c:9f:
55:f2:55:77:f3:03:52:9e:64:5c:a3:e6:d3:2d:c2:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:7D:9F:3A:C1:73:C6:A2:06:1E:6C:7E:B9:5E:E7:D6:6B:B9:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:4d:02:79:92:c3:71:4b:aa:5b:76:d3:a7:8b:fc:21:bc:91:
89:0a:59:25:d4:c7:f8:bb:df:b1:4a:eb:b7:dd:4a:55:b0:10:
d0:b5:e7:4b:3f:8d:8b:6d:30:74:13:01:e5:31:25:86:89:a3:
47:78:39:2f:80:23:db:9f:e3:3a:a0:66:20:0d:8d:2f:59:01:
b5:3c:ff:05:71:8f:af:ad:65:ca:54:02:70:f7:e0:06:f2:c9:
5d:b1:fb:e6:fb:08:c7:7b:c4:56:86:6a:79:af:90:4b:b4:89:
57:e8:39:ae:97:49:f4:17:7d:a6:c9:90:34:e0:ac:8c:75:e3:
00:21:c6:52:87:2f:88:bc:01:f9:76:d9:ca:ac:73:cb:f7:7b:
55:6f:6f:31:5f:83:f6:a0:85:d9:73:33:22:3d:7c:2b:13:2f:
ba:f9:5f:af:93:e8:aa:65:0b:e4:e0:a5:62:fc:09:29:c5:b0:
91:54:e7:68:b0:78:fb:93:d4:76:3b:4e:6c:88:82:f5:56:8d:
8b:c2:70:fb:6c:4d:8e:6a:85:cd:29:f7:50:84:91:e8:02:b8:
cc:9c:9f:d1:3e:86:14:59:16:8e:42:e1:a2:2a:c4:fe:91:63:
ed:c4:b0:89:d7:5e:7e:04:36:fa:3a:4e:97:4b:03:09:1a:a8:
ea:25:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:54:10 2025 by rpki-client