Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa
File: 1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa (raw, json)
Hash identifier: ZrbjIKGTqO19qSREW5C1vfAQgeNrJoweYIdtyQY460Q=
Subject key identifier: CE:AE:60:5A:B1:CA:13:B7:AD:95:14:EB:36:24:E1:BA:61:19:A0:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285847E0885C76EA237FE449D35A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa
Signing time: Thu 14 Nov 2024 13:35:46 +0000
ROA not before: Thu 14 Nov 2024 13:35:46 +0000
ROA not after: Wed 12 Feb 2025 13:35:46 +0000
asID: 396561
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:88:5c:76:ea:23:7f:e4:49:d3:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 14 13:35:46 2024 GMT
Not After : Feb 12 13:35:46 2025 GMT
Subject: CN=375d4e2e-f903-43cb-b174-df667f2408ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:03:dc:73:da:55:0c:d3:dc:ba:e6:72:5b:
ba:37:39:60:bf:40:35:4b:25:1a:76:b9:66:86:48:
2c:f2:0b:27:04:f1:2e:65:0e:4d:52:02:06:e9:b2:
18:13:10:34:46:3a:2b:0c:cd:3e:60:48:9b:bb:e7:
b3:c5:d8:f6:c0:15:04:c4:9f:5e:31:89:0e:aa:5b:
a1:66:4a:4c:f4:b7:33:67:d3:b9:f4:bc:04:51:ba:
b7:81:31:75:87:74:1c:3a:de:66:4c:fe:bf:5a:fd:
b1:8c:47:56:f6:3e:67:51:11:4f:6d:b4:f0:aa:20:
8c:14:c9:61:e0:70:d3:79:4e:c6:e7:9d:25:13:8f:
6f:d3:9a:b3:c8:ce:93:dc:de:b7:88:0a:88:07:b0:
7b:c7:47:c4:0e:1e:41:ed:62:21:0c:f4:01:57:d9:
45:18:14:80:d5:4e:8c:da:72:74:c8:86:bc:03:54:
a9:58:e4:a3:f7:57:78:b0:09:b8:0f:59:84:b2:2d:
96:f5:9f:bd:a4:50:12:d4:9d:c4:04:58:e1:d0:c2:
f9:c7:df:59:13:42:7a:17:30:0e:82:67:e6:e8:8d:
05:e7:62:ca:38:17:3b:67:97:45:36:76:d6:65:86:
de:27:3e:ba:ec:e1:3f:9f:da:69:1b:f6:ca:ef:b1:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:60:5A:B1:CA:13:B7:AD:95:14:EB:36:24:E1:BA:61:19:A0:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:fa:2e:e9:e6:d9:a9:16:c6:69:d9:bb:72:b8:ad:77:d5:d5:
4c:7e:b8:10:15:40:e6:0d:91:17:5f:b6:3d:f5:ee:31:de:ab:
fd:da:7d:05:9e:d1:17:69:8a:72:a5:87:44:a7:69:63:ca:51:
0b:23:bb:41:cf:66:f7:66:95:b4:f6:3d:e1:22:89:80:c2:9e:
f5:b5:d3:44:2b:9a:6e:ef:2f:2d:1e:7e:56:9c:99:09:f7:f3:
36:71:26:1f:bb:5f:bc:a8:41:0d:05:f1:3a:c2:9a:87:05:82:
06:2d:20:6e:db:da:83:79:1a:a1:87:c4:7b:af:fc:26:67:f0:
49:84:01:c2:90:c3:52:ea:30:5c:63:77:ee:62:03:95:84:5d:
92:d1:5b:57:10:01:8f:4d:3f:fb:1d:2a:2a:cf:51:bb:d6:a4:
8f:d3:e1:e5:71:0c:d0:2d:39:b1:b7:41:dc:c3:64:c1:76:e4:
e4:30:1a:ab:dc:0c:0c:2f:0c:af:b3:83:8d:5d:cf:54:aa:fb:
b9:fb:69:9d:dc:a7:28:ee:f5:3c:e2:79:f5:a5:5a:dd:01:1b:
56:71:f8:b3:fb:c9:30:12:98:16:2f:dc:ac:cf:4a:eb:20:53:
40:e7:36:d7:5e:fc:cb:04:6b:e1:b4:cc:18:94:22:aa:fb:03:
a9:0e:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:42 2025 by rpki-client