Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa
File: b391d9a3-be6a-3e10-b3b4-5de58481660e.roa (raw, json)
Hash identifier: 8+EhwyqnISIeLJQVvj9fn2ppG0XhLjgyx+SFrCN6kOc=
Subject key identifier: D4:53:0F:40:BF:09:64:66:8D:E9:39:91:F8:0F:C4:19:77:75:11:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9B0B3D2AE15D6488D448
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396567
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9b:0b:3d:2a:e1:5d:64:88:d4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=4dc3c322-38a4-46fd-8678-2add9967bdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:b0:7d:56:74:25:92:97:59:08:a2:93:b3:
e0:83:5f:7c:3a:eb:60:af:a0:9c:7c:28:12:4a:fd:
50:9f:85:d8:5e:ce:e2:4b:cf:ce:d7:9a:24:2c:c9:
cb:a1:ba:32:ac:69:c2:9c:b3:5b:a8:2e:dc:7e:ff:
2a:f7:66:d7:93:3f:52:0b:d6:fb:9e:7e:cf:a5:e6:
34:60:7f:fa:fa:b2:bc:39:52:ca:6a:96:f1:c1:5f:
18:a7:be:9a:7e:d2:a4:89:86:e2:d1:1f:b5:cf:f1:
6d:4e:77:61:64:66:a0:f2:5c:12:5b:32:6a:a4:33:
f7:13:1d:0a:2c:6a:8b:35:84:e4:c0:b2:22:22:c0:
56:4e:ec:6e:10:c2:cc:db:35:5f:86:e6:a9:9d:41:
37:34:39:59:b5:01:0b:a5:2c:83:39:14:eb:3a:df:
5d:06:83:c6:ef:aa:f6:f8:b1:d6:6b:63:b7:bf:2e:
e9:a3:0f:21:a4:00:0d:2f:34:56:e5:49:e7:4b:ef:
d8:14:76:90:be:e8:6d:a7:95:48:6f:5c:29:13:53:
45:78:20:6a:26:b5:11:81:5d:b7:af:e7:b4:1f:0d:
24:7d:c2:12:13:ee:e4:eb:62:0f:e7:9c:52:a6:4a:
0b:cb:70:fb:5d:49:a9:9d:33:bf:56:19:db:cd:cc:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:0F:40:BF:09:64:66:8D:E9:39:91:F8:0F:C4:19:77:75:11:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:3f:35:7c:80:29:e1:1a:ff:3f:08:56:47:07:33:08:7b:59:
d3:3f:a5:28:52:55:cb:5b:e4:a2:1a:96:28:64:51:76:48:ff:
4c:8b:40:4b:83:67:88:b0:28:5b:54:16:c2:75:b7:6d:cd:fb:
d0:46:6b:24:3f:88:57:15:df:9e:b9:15:01:45:4b:9d:2d:be:
f6:25:7c:fd:5c:1d:53:6b:c5:69:7f:4b:28:9c:5f:de:1c:2d:
3f:b4:c1:cc:2d:82:9c:d8:77:d3:98:26:6d:0b:da:34:bd:c1:
c7:2b:63:2c:d3:e1:fa:c4:7b:ec:a2:c6:d4:8c:4c:6c:af:1a:
c6:a9:03:82:b7:9a:1d:d2:3e:b3:ca:10:de:d7:de:58:de:3b:
25:0d:9a:ae:c4:75:f2:b4:4e:fc:42:c9:2a:77:64:c2:af:e9:
45:6d:7e:0a:6c:45:be:90:1d:c2:e5:ad:71:80:b6:39:f8:af:
00:e8:4b:da:1c:73:6d:70:9f:2b:13:36:67:bf:de:26:fa:3e:
4d:5a:f1:f6:af:a7:8b:b7:e9:83:8f:28:69:ba:52:ba:3b:ca:
e7:17:c1:68:ca:de:bf:33:df:56:55:38:89:5f:59:b4:42:c3:
4b:5f:be:bb:fc:bb:43:24:87:7c:6b:14:8c:4d:42:7c:5d:0c:
7c:d7:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:30 2025 by rpki-client