Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa
File: fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa (raw, json)
Hash identifier: V0qh8Gjmyb3sZ9IY603yeieGxKIfIAb2EeGfArUBd+M=
Subject key identifier: DF:73:76:3D:8C:51:7B:06:86:42:81:5D:5F:CB:FE:BF:86:A0:09:E3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA5631E36C4F6F6AE8345400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 397204
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:31:e3:6c:4f:6f:6a:e8:34:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=bdc670d5-e47e-4edc-bee4-ad697172fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:1b:16:21:14:eb:c6:f6:d3:35:46:8e:3a:
1c:00:23:b9:65:1e:37:02:32:fb:a6:b4:7d:dd:c4:
a4:fe:e8:e4:bb:d5:2c:c9:8a:57:fe:65:10:38:9f:
1d:d5:38:2e:3d:2f:50:f2:4d:14:81:ab:c3:97:94:
9d:dd:24:bb:24:a1:a3:bb:74:ee:01:d8:56:bb:c0:
0f:8d:56:2e:e0:fa:ef:dd:8c:95:5f:57:f7:02:cd:
77:e9:59:50:68:e2:72:75:47:e1:ac:18:8c:f6:c5:
10:eb:30:15:09:87:19:48:1e:b6:38:0a:16:69:90:
6d:d9:ff:47:3f:34:69:b8:14:48:47:52:9b:55:a2:
16:6b:9f:5e:87:94:96:f2:6a:f2:f7:ab:3d:7d:79:
51:4f:70:a7:d4:21:a6:16:03:d2:cf:44:40:59:54:
6c:2a:5b:62:fa:f4:94:89:60:f5:44:e6:f7:bc:35:
3b:97:ef:ee:41:1a:ca:ca:a9:e9:b1:d4:5e:15:6d:
d4:25:a9:07:67:e6:0c:4e:29:3b:33:d9:9b:81:2d:
09:59:50:b0:2d:bf:f8:67:40:58:65:13:b8:82:60:
ec:ba:03:01:bf:77:27:5f:94:49:33:31:3d:d4:8a:
dd:1f:ba:39:c0:8d:e0:40:63:4d:68:83:0d:b6:d3:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:76:3D:8C:51:7B:06:86:42:81:5D:5F:CB:FE:BF:86:A0:09:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f5:9c:cc:6d:3c:a8:68:5d:a2:db:7d:a4:8c:22:42:34:c7:
ab:e5:d4:6c:c4:1f:6e:7b:17:91:c4:6c:e9:37:85:73:05:45:
6c:e9:b5:44:67:0f:1d:be:db:0d:56:29:c1:24:bb:b4:44:e0:
ca:55:2d:11:84:11:d6:6d:db:d2:bc:65:57:ff:f0:89:b1:9c:
48:1e:94:3e:86:00:b2:bd:28:7c:40:34:12:da:61:dd:31:d6:
75:cd:64:e7:f9:41:e6:e8:eb:33:92:6e:aa:50:17:c7:9c:e7:
d8:c4:8c:36:4f:0f:ff:80:e6:10:c8:ae:d9:a1:fa:ff:f5:88:
2d:cb:3d:03:5d:d3:54:99:d4:08:d9:96:ee:37:95:d9:06:4b:
53:a9:33:21:ea:9a:29:c2:cf:27:7f:3a:0b:1f:88:58:12:6e:
12:1a:24:f7:9f:4e:67:63:9b:06:36:42:ca:07:65:0c:4d:84:
06:46:4f:4d:3a:f4:2b:c3:62:6c:aa:23:90:a3:b5:4a:31:85:
2b:e4:a0:ea:a2:50:c2:db:97:21:22:f5:88:ca:bf:a5:76:6b:
a6:a7:f8:13:d0:67:e0:51:82:c1:c2:ca:cf:2b:d4:de:1d:bb:
8c:c0:7d:f4:58:c6:ea:96:61:d1:46:5b:d6:dc:4b:12:8f:8e:
fd:e9:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:12 2025 by rpki-client