Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
File: ddc65554-e3b0-3017-b4a9-4be5acf37481.roa (raw, json)
Hash identifier: BP3azP7XXOrJvbsu4QChx4c6Jm7QYwlPndEpJe5iWr4=
Subject key identifier: 2E:BF:3C:87:20:E3:AB:F2:A5:1C:0A:74:37:34:19:BB:B7:9D:4C:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60D00186B137C5F8BE9A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396545
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d0:01:86:b1:37:c5:f8:be:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=1c21322e-575d-42f0-8162-0f9868461e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:28:26:5f:dc:12:1f:3a:68:55:f7:81:22:
7a:0f:3b:83:8c:45:f2:ed:d5:68:8b:0c:77:8e:63:
07:ce:98:17:f4:80:f3:5b:0f:4d:fc:f0:aa:f2:81:
3a:ee:14:98:17:c1:cb:fa:2b:08:67:86:95:35:49:
08:39:9f:23:66:4c:d0:0a:a2:5f:4b:36:5e:43:83:
d0:9a:81:78:c1:e1:df:52:a2:cc:f2:c4:1a:11:dd:
91:5a:16:91:8c:e3:4b:e0:dd:0c:b2:7d:42:11:dc:
e4:69:89:9f:e9:4b:3e:6e:aa:4d:f0:59:a0:2e:2d:
49:a5:ed:91:1a:c6:9e:11:93:a5:83:7f:e8:22:ad:
95:3e:aa:b3:cc:ce:1b:ed:56:41:38:73:9a:1e:71:
81:c2:6e:ae:c1:d2:15:0e:25:dd:4b:4a:73:c7:43:
91:43:17:18:7b:f0:22:b3:ca:3f:fa:3d:2f:45:2d:
5c:64:48:14:ce:72:41:16:1a:e6:1f:18:26:d9:b7:
be:b3:02:e7:7c:13:f9:ec:83:66:71:1e:2a:f0:5e:
09:07:ad:24:99:80:77:43:c5:c6:78:ee:49:2c:e4:
02:26:39:0f:fe:ad:b5:eb:a1:48:dd:f8:31:5e:3d:
be:06:2b:23:37:d8:5f:2d:d9:aa:7a:76:8a:e5:2e:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:3C:87:20:E3:AB:F2:A5:1C:0A:74:37:34:19:BB:B7:9D:4C:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:3f:2b:f6:3d:85:0d:4d:d8:e6:56:b7:0e:cc:38:61:f7:38:
0e:0f:54:58:42:3b:0d:b2:1c:91:0c:f9:c3:23:82:e5:ae:4d:
41:28:1a:e6:0c:b7:82:67:c5:6d:a8:21:8e:7c:60:57:b6:e5:
59:41:94:61:7b:2c:ec:80:02:37:d4:54:05:b8:fa:bf:a5:26:
95:7a:26:09:c1:1c:cf:83:be:41:9b:07:d8:dd:36:9f:83:c7:
bd:b6:85:84:23:0a:b6:17:85:78:0d:6b:ce:12:6c:e8:01:80:
9a:b2:47:38:f0:df:9a:72:a2:c7:42:0b:21:ed:aa:0a:c1:c2:
fd:c2:b9:d5:bb:73:25:6d:4f:fb:09:cc:b8:91:5c:2a:95:dc:
ea:5f:38:63:34:8a:c7:66:45:38:2f:e0:b5:a2:a9:a1:7d:de:
b1:11:9d:84:28:57:b1:1f:cb:51:38:85:7d:15:53:35:17:69:
49:d4:3e:81:53:bf:5c:13:1f:b6:c9:86:2c:b7:49:23:d2:d6:
e1:33:f7:61:44:64:bc:e7:f8:ac:4a:9b:fe:2c:c7:e4:11:e8:
37:b4:bb:e6:42:30:c7:eb:b7:dd:cc:ea:b2:57:6f:b3:dc:41:
00:27:de:2f:55:69:36:0d:b4:f5:0c:42:e9:d4:fb:40:89:94:
44:39:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:26 2025 by rpki-client