Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa
File: f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa (raw, json)
Hash identifier: NnA2yugXD6X1QE+0zzJ3mVmnT04sN1O/a/7RkUvz7Rc=
Subject key identifier: E2:BC:E5:E1:36:08:73:D2:45:29:82:82:4C:84:82:20:9D:19:63:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60C7D473A8C744F826F240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396615
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:c7:d4:73:a8:c7:44:f8:26:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=5eac94c2-3fbe-4677-8939-8273d2778b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:59:87:42:7c:e2:4c:56:e0:91:78:9c:2c:
ec:f2:01:07:03:00:3a:32:e8:bc:a1:03:96:e9:7a:
fc:60:1f:05:88:c7:67:7c:5a:04:b7:f0:6f:ca:a6:
14:6b:c8:25:a5:68:94:99:eb:b5:59:c5:6d:64:5d:
8b:6c:e8:ae:44:54:96:fc:cd:14:cf:1f:54:9b:32:
61:91:17:84:7f:e8:c9:47:49:98:2e:83:68:94:df:
c0:55:13:83:3e:f1:87:98:78:9c:9d:39:3a:36:25:
3d:2b:07:15:d0:4f:2c:f7:22:f6:6e:34:48:3b:be:
2c:29:a6:5c:28:75:da:67:c7:a0:3b:8f:7f:5a:0a:
f7:88:f5:8b:95:1e:e1:09:2f:68:0c:79:75:26:aa:
30:1b:b1:c0:ad:0f:37:50:71:a5:ba:c3:93:e6:3c:
6c:a8:6e:72:bc:a2:41:47:5b:62:08:46:c3:9e:fc:
5e:05:d4:be:eb:df:06:51:6f:a1:77:b5:97:15:b3:
d4:17:c7:66:fb:cd:d5:3e:e6:91:a4:2e:13:8f:64:
2f:f2:f8:9f:6a:6f:47:9f:df:47:f6:78:a6:30:ba:
d5:82:b7:c6:65:23:98:0b:37:fe:47:df:37:f0:51:
9b:cd:d3:7e:38:6c:44:dc:87:6a:60:a2:7a:1c:4d:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:E5:E1:36:08:73:D2:45:29:82:82:4C:84:82:20:9D:19:63:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ba:f7:46:9f:ab:72:ec:a5:5d:9c:d0:d5:ae:b0:1b:04:fc:
36:c4:86:64:4e:49:bd:ef:68:1e:85:5d:3b:a0:d7:eb:34:a2:
78:4c:26:e0:09:d8:ed:f8:c8:6e:38:62:dc:5a:74:be:7a:2a:
a0:d6:a0:ed:b6:79:85:21:ae:09:cb:ea:b5:5b:6d:2d:18:3b:
4c:5f:d8:6d:85:fc:03:70:f1:4e:6a:10:03:5a:5f:1e:6e:1a:
77:70:65:f1:66:dc:90:b5:3c:a3:23:7f:7a:97:9c:1f:11:34:
6f:7d:08:a0:b2:c4:b8:b1:ed:96:b4:b4:bf:76:5f:ac:85:0a:
bf:ab:de:14:2c:f9:f6:a8:03:85:a1:39:fe:23:70:46:fe:81:
9d:45:11:4d:20:57:73:da:7b:34:ba:c5:a5:31:c2:be:0b:6a:
bd:b5:4e:d0:4a:4d:cc:ee:f2:84:0c:d3:80:de:8d:ff:1b:ea:
14:13:81:a4:6d:a0:3b:d5:e3:ea:48:26:9d:a1:32:03:1b:0e:
f0:4b:5a:0f:a3:e0:40:89:2f:48:e6:3c:4a:2a:1f:30:5a:94:
ce:85:b5:75:42:65:db:52:d7:53:43:29:c4:29:7d:4b:ca:f2:
83:36:35:39:4f:09:7c:6f:c2:79:07:e5:a1:81:5a:d3:b9:9e:
7f:d7:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:57 2025 by rpki-client