Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa
File: dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa (raw, json)
Hash identifier: Fi5hlJDy+Xn56VPUXctjRKv81H+tfepQ7vRiDoXsZAM=
Subject key identifier: 71:8B:A2:1B:E2:E9:02:29:90:73:DD:93:BD:42:54:F1:D1:3F:2D:59
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60CE7907DC495C89DE89C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396609
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:ce:79:07:dc:49:5c:89:de:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=419567a8-31b5-4742-a073-8e280e2b13f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:a6:08:e8:ad:55:b6:82:c0:52:fa:ee:6a:
bc:b8:f3:9d:e9:75:3f:74:72:dc:8c:70:23:d4:0d:
16:fd:2b:35:5e:14:06:03:ef:63:10:63:4f:30:18:
59:bb:23:e8:8a:c0:80:47:80:04:a5:43:b3:73:da:
90:ca:b6:48:f9:60:35:ed:4b:3d:48:8f:c4:49:e7:
42:b5:a9:94:ae:05:bb:83:72:8a:b8:31:55:73:d3:
29:ee:1a:d2:18:6c:b2:28:f3:96:eb:52:0f:49:33:
5e:a1:63:12:b7:e3:1f:13:2f:06:7f:af:43:f8:0a:
95:2b:bc:a0:e3:98:55:02:c7:53:18:f7:0a:1c:cb:
95:16:7e:50:57:53:11:82:3a:65:0b:30:2b:84:cb:
e3:80:ed:d8:0a:93:44:07:96:35:f7:57:24:41:87:
db:50:3a:93:96:00:46:fb:0e:18:62:d9:f2:49:fd:
a2:20:d2:da:e9:f3:2b:4e:51:29:fa:b1:d6:59:22:
a5:2e:8f:a8:35:5a:eb:5c:ff:fd:7e:68:b5:0b:88:
dd:9b:d5:c6:9b:99:ab:40:f1:59:9a:4c:ed:99:32:
67:09:31:cb:70:d3:cd:4c:cf:8f:9a:1b:4d:1d:25:
54:07:c0:62:40:1a:33:24:74:70:eb:1d:2d:29:41:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:A2:1B:E2:E9:02:29:90:73:DD:93:BD:42:54:F1:D1:3F:2D:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:35:2d:72:06:02:f9:4c:f1:d9:04:1f:89:ca:01:aa:ec:fb:
c1:3b:f6:6a:70:d3:f0:ec:fe:b3:f2:b1:e2:5d:a4:1c:20:ef:
52:06:f0:47:a2:b1:49:1d:29:df:2a:33:a5:2b:6d:86:35:b8:
fa:be:d2:04:b2:b7:20:59:0e:20:b0:94:bb:87:c8:8d:9f:35:
83:b2:0b:53:01:c1:66:77:18:c6:37:f8:96:41:d6:56:c2:f6:
92:5b:0a:48:a8:88:6e:5f:49:6d:45:b2:81:fc:83:79:eb:1b:
18:da:f2:12:2b:3b:be:35:9b:8d:61:bb:1f:25:5a:70:96:25:
3d:ff:54:5c:84:21:f2:62:4c:20:36:bb:3b:50:24:85:93:a8:
cf:a4:a5:f8:64:93:b8:29:cd:6b:6c:7e:6b:45:56:1c:e8:c5:
41:bd:03:81:7d:3d:f6:a7:b8:3e:34:20:5d:d6:a2:7e:9c:fa:
90:9f:1c:03:db:ee:dc:59:21:a2:97:f8:4f:61:02:e8:ba:32:
74:7a:34:b4:5c:71:0e:16:80:9f:a3:3d:5f:dd:6b:ec:84:d0:
bc:d9:f4:5f:e4:a1:74:0d:dc:a5:c0:ca:17:2c:77:3a:06:cc:
0c:5a:a4:80:8c:bc:fb:c6:8e:6c:ab:5b:a9:c9:77:2b:d2:09:
db:c7:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:32 2025 by rpki-client