Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f164ca19-d3ad-3088-9d68-a64cc9ec7988.roa
File: f164ca19-d3ad-3088-9d68-a64cc9ec7988.roa (raw, json)
Hash identifier: PSWE/+zyXvPR3zN/QGCYiddwk10gpK6oYmaS7IVDcNE=
Subject key identifier: 2B:4B:A4:70:01:FD:DA:98:0F:4D:84:4F:17:DA:E4:BC:8C:33:69:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60CD592E6E8180C172BA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f164ca19-d3ad-3088-9d68-a64cc9ec7988.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396604
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:cd:59:2e:6e:81:80:c1:72:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=94dd71f7-8791-43f8-8e31-473849db2c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:a1:14:50:ac:bf:50:a5:91:55:6c:52:b2:
84:76:5d:ce:bf:30:a4:f0:f0:c3:15:ec:cb:5d:38:
34:77:a2:7f:1c:dc:c7:d7:81:59:53:fe:a8:3d:09:
57:51:b9:b5:48:7f:fe:dc:dd:df:4f:55:bc:7c:9b:
aa:80:60:aa:c3:d4:54:fd:03:b0:f6:d9:73:bd:5f:
d8:88:d4:07:44:b7:19:4e:7b:db:fb:64:af:2c:3b:
ba:1c:fb:23:b8:d9:bd:0c:24:61:c5:1a:95:ba:6b:
d2:01:34:35:2c:90:0b:d1:6f:bc:1e:72:8f:a7:d1:
3d:70:08:de:43:92:47:3e:43:74:aa:db:50:fd:4d:
e1:86:c6:37:ca:69:5e:8c:32:20:ed:3d:f1:09:12:
e0:94:61:1f:75:6e:c0:d5:1c:cd:1a:35:03:e4:ef:
64:54:44:53:49:d8:db:aa:dc:32:75:da:b1:91:dc:
9a:b2:6d:fa:12:ba:e6:41:40:a7:78:5b:3b:5b:06:
e3:e4:1b:4d:37:d5:58:1d:e0:ca:7f:44:c1:50:7a:
38:14:24:d5:07:dc:26:c6:56:04:aa:e9:0d:7a:ab:
6e:df:6b:ec:0f:49:48:35:7c:68:3a:4a:18:bc:99:
95:b3:86:06:f6:e3:0c:1e:82:d5:4f:4c:f1:da:86:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:A4:70:01:FD:DA:98:0F:4D:84:4F:17:DA:E4:BC:8C:33:69:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f164ca19-d3ad-3088-9d68-a64cc9ec7988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c6:ea:56:6b:57:3f:13:6e:6c:27:43:03:a4:8a:3b:95:af:
eb:fe:db:ba:92:05:6e:76:b3:1d:0b:55:6c:58:18:99:28:fa:
0d:81:a2:53:f5:a4:bd:e6:bd:01:16:7e:64:ef:f5:40:da:1f:
70:1f:85:e8:00:1c:9e:e9:fc:f6:53:8e:f9:f0:81:25:c9:e0:
ad:22:94:7f:19:f9:84:46:fd:e9:02:7c:36:66:37:73:bd:c3:
d3:8f:42:43:4a:fd:f2:d4:09:3f:32:16:4d:21:f4:bc:6d:c2:
ad:95:1b:79:1b:c7:7a:dd:12:ff:0e:db:0e:6a:5d:42:82:21:
e7:b4:e4:30:33:c6:6e:6b:15:cd:f4:6d:33:50:2e:e7:aa:55:
67:88:a2:01:b7:1d:c6:0f:64:07:53:32:76:0f:f7:5d:c7:be:
79:61:1f:03:d6:b4:d9:70:25:f8:b0:12:09:59:97:42:29:7b:
b5:0a:d6:29:57:12:b6:06:57:ce:41:3a:56:11:eb:c2:10:36:
3e:43:9e:a3:4e:07:db:02:5e:1a:20:9e:d1:3c:6b:31:be:de:
c9:c7:3f:1d:06:e2:a0:8f:c8:e8:f5:b6:05:a5:f2:d7:d6:2f:
4c:81:6d:a6:ac:a2:d5:47:68:40:3e:71:b5:5c:92:d6:64:8f:
9c:93:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:18 2025 by rpki-client