Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5cee2c-9390-3840-812e-6b40a5cffaef.roa
File: ba5cee2c-9390-3840-812e-6b40a5cffaef.roa (raw, json)
Hash identifier: JLN5z8W2YLQQrk8IFyjHOm+RW4Ga438qJUK/qsKzHXI=
Subject key identifier: 71:C5:9C:D5:DA:5D:24:7B:2D:D0:33:89:5D:C7:29:20:9B:3E:A3:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB986D3A7BE7298AF8E640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5cee2c-9390-3840-812e-6b40a5cffaef.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396558
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:98:6d:3a:7b:e7:29:8a:f8:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=8ccc2e77-334f-4352-aead-a0758ac5c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:63:c4:9c:4d:8d:c4:74:d6:cf:dc:54:e6:
4b:30:5d:ce:df:eb:77:75:c5:e1:6d:72:c1:6c:83:
a4:88:e2:06:99:02:88:b5:cc:6b:c3:32:21:af:3b:
62:94:5e:69:a3:f9:b9:e4:14:2d:fe:ca:ac:00:aa:
f9:b9:23:8d:1d:aa:43:97:2b:7c:90:84:cf:eb:72:
65:94:8b:e0:e5:d9:e0:b4:5e:e6:6a:61:74:83:ea:
5a:18:ab:c5:ed:e2:87:77:a2:42:15:af:d8:74:c2:
1f:1f:49:17:b9:d0:98:d7:00:2e:51:24:3a:89:c4:
fb:92:be:19:69:7c:ed:2b:cc:b2:0c:83:85:74:a3:
04:1a:a1:95:a8:ec:76:56:2a:b1:53:8b:a2:24:0f:
84:e1:c9:4c:3e:b9:f4:45:87:a0:63:f0:ae:25:f9:
85:7f:ba:fc:42:18:05:b0:4f:af:23:5d:46:e9:45:
60:84:77:da:5a:c2:6f:15:34:4c:06:be:94:79:88:
3e:8a:70:76:d6:4f:f5:b1:67:59:b5:b6:d1:14:e2:
87:0c:91:eb:21:c6:bb:fe:43:a4:25:3c:d3:60:5f:
91:8b:c8:2d:07:44:e8:ed:34:d2:53:5d:f5:59:89:
29:ac:03:5d:c1:0f:ff:75:63:a8:e2:47:67:55:e2:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:9C:D5:DA:5D:24:7B:2D:D0:33:89:5D:C7:29:20:9B:3E:A3:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5cee2c-9390-3840-812e-6b40a5cffaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f6:f4:4b:ed:ae:4f:86:1b:a3:cf:83:18:d1:4a:9d:25:ed:
72:fb:aa:45:e9:86:c2:26:da:97:a7:13:4b:af:6f:ae:c1:5f:
6a:cf:73:5f:36:a7:f4:ff:99:c4:a5:70:45:43:99:c2:8d:ab:
39:74:9a:71:c7:2f:17:0b:0e:23:4f:cc:fe:8c:64:f0:24:d4:
98:ab:26:ac:34:2b:fa:4b:8c:24:e1:05:03:99:93:e7:12:41:
0d:07:d6:59:68:b9:3f:fc:26:56:20:30:2c:48:d3:79:c5:b8:
81:66:38:dd:16:21:7b:8d:9d:89:9c:9f:9d:76:b3:0d:c7:1a:
6c:fa:aa:90:96:5a:db:1b:5f:c7:c3:8f:20:57:66:94:ae:9e:
5c:46:50:bd:01:b8:81:71:b6:db:97:46:1d:c2:22:74:e4:84:
1f:96:ca:ed:a3:0f:c0:f7:56:01:c2:e4:9a:e5:ae:8d:01:41:
ba:c1:02:be:f1:20:8c:16:45:2d:60:5a:9c:5c:b5:54:94:d5:
f1:03:ea:62:0e:b4:f5:1f:5e:96:3e:d9:db:4b:0f:50:ac:25:
31:cb:a7:b8:59:ee:a6:10:ec:23:ae:47:4b:9e:20:da:13:f5:
92:b9:04:10:cf:38:44:c3:1e:12:1c:da:70:1a:92:ef:72:2e:
2f:82:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:09 2025 by rpki-client