Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6459b9-9c51-3a74-9de8-a4613d75046e.roa
File: bf6459b9-9c51-3a74-9de8-a4613d75046e.roa (raw, json)
Hash identifier: h+5C2fK5PPj4Fdk/3rUtuQ0oQXGwtKm3E3bMbEvdbRA=
Subject key identifier: 59:CB:2D:57:12:26:7E:6C:27:80:CF:7B:21:8F:1B:36:B3:BE:FC:EC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60C970734F57102E564C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6459b9-9c51-3a74-9de8-a4613d75046e.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 20172
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:c9:70:73:4f:57:10:2e:56:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=ac118866-5a65-46c6-8c59-7ac4fe29f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:92:23:c8:a2:2c:cd:8f:0e:41:a9:79:3b:
89:47:61:2e:fd:f9:b5:a4:2d:21:51:36:cc:a8:66:
a5:59:10:40:d4:88:db:8b:59:b7:86:c7:19:a6:ee:
cf:57:b0:f6:7d:11:d4:c9:f7:14:45:d4:d8:a0:8c:
a0:fd:4e:4d:f1:ea:f0:1b:9d:4c:f9:47:e1:1a:db:
a3:68:43:ad:b4:cd:05:0a:3c:85:ff:7f:d7:92:23:
75:a4:79:e9:be:76:6f:53:da:cd:2d:60:24:6b:1d:
ce:03:f2:92:43:9f:4b:de:4d:ff:98:e8:55:07:06:
0a:7b:12:33:6d:70:33:c6:3b:6d:58:57:e8:32:cd:
0c:03:b6:fc:44:4c:e3:12:2a:9d:00:86:27:2f:c5:
bb:9d:21:0a:41:9c:4f:99:34:2f:e9:9d:bc:b5:9a:
9d:ce:ae:3c:2a:52:df:dc:4b:65:29:4b:44:67:98:
63:f9:34:67:72:07:20:c8:2c:8e:d4:48:14:a2:aa:
78:48:e2:34:2c:44:d8:66:1e:b8:aa:c2:ef:25:4e:
67:da:bc:8d:42:67:9d:d5:9a:58:b7:e4:3c:7a:6a:
4b:ff:11:92:13:df:3c:98:07:01:88:a3:a3:f7:c8:
fc:17:c4:df:c1:1e:45:55:5c:a3:8a:7b:cb:ce:ad:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:2D:57:12:26:7E:6C:27:80:CF:7B:21:8F:1B:36:B3:BE:FC:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6459b9-9c51-3a74-9de8-a4613d75046e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:fe:92:6e:fb:84:e7:85:96:f6:10:8d:06:36:e7:92:1f:45:
b0:ae:a9:85:39:23:48:c1:55:e9:42:00:a0:90:f5:a5:34:45:
02:30:00:02:d2:87:5e:e8:a2:aa:ec:8b:89:de:7a:80:c4:e5:
c3:f3:a0:7e:63:be:e3:b9:93:6f:0b:59:6a:30:2f:d7:a0:5d:
81:89:cd:f5:4d:0a:9d:be:7f:56:91:7c:04:f2:22:d1:17:31:
b8:c8:a9:eb:4a:d5:70:6b:f9:2c:f6:bf:1c:b5:33:3c:30:3d:
e7:66:2c:73:38:cb:a3:61:1c:7c:da:1b:1f:23:7f:b5:15:d3:
e3:fe:6f:5a:c2:b7:8f:7c:71:41:73:18:bf:c9:6e:d2:5f:63:
4d:df:fe:f5:d7:b2:6e:0d:ab:b7:f3:bb:d5:6f:ed:b4:eb:9c:
03:10:d5:c1:25:0f:be:94:71:2c:24:69:b4:3b:47:a4:40:5b:
f0:f1:83:86:85:b4:2b:dd:50:6d:52:29:49:02:5f:ff:96:3a:
1a:4d:ba:7b:55:67:70:ad:9d:10:c7:4f:68:0e:45:06:c3:17:
7d:10:61:79:98:62:9c:1c:fd:2c:63:08:2d:d6:15:ea:df:fa:
50:67:4b:12:6f:e8:d7:b3:27:0d:46:7f:1e:9c:db:27:5f:9e:
22:54:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:20:01 2025 by rpki-client