Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
File: 5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa (raw, json)
Hash identifier: xojYMJIozlaJm8QnKAeaHJJ+C6L1Cd2xbo9WYt/hL8I=
Subject key identifier: C1:00:37:BF:6E:54:6F:A4:B6:9D:14:A5:24:EE:3C:9F:41:84:76:BA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285847E0885C1C57A469C0BBCD0320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
Signing time: Thu 14 Nov 2024 13:35:46 +0000
ROA not before: Thu 14 Nov 2024 13:35:46 +0000
ROA not after: Wed 12 Feb 2025 13:35:46 +0000
asID: 397205
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:88:5c:1c:57:a4:69:c0:bb:cd:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 14 13:35:46 2024 GMT
Not After : Feb 12 13:35:46 2025 GMT
Subject: CN=53b3a9bc-f026-4856-bd24-4e9cd5b75539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:ff:01:e8:43:97:7d:91:a8:bf:38:bf:30:
9e:54:fc:0c:65:25:17:39:70:22:47:38:98:37:98:
16:5d:4c:05:39:1c:e9:32:c4:1d:76:7b:b3:0c:ee:
7c:71:83:52:92:ad:cd:6f:fa:3f:a1:51:db:6a:f8:
59:2a:b7:e6:77:99:f2:e1:6e:cc:0a:3a:13:54:46:
e8:42:ce:88:be:64:be:52:96:78:16:53:3e:e8:85:
86:16:63:bf:1e:49:1b:b8:d0:61:82:59:92:15:a4:
f2:db:8e:7f:60:31:ba:ad:e7:2e:da:09:59:96:fd:
49:49:ca:8e:65:55:db:24:36:d7:0a:6f:ac:3a:e0:
c3:03:4e:bf:bb:7f:25:f6:48:3e:41:c8:1f:f7:18:
98:3d:f5:c7:2e:6f:db:d8:dd:21:2a:f2:46:0a:93:
29:37:6d:0e:87:3c:92:bd:26:7d:ec:73:1d:3b:84:
6a:75:1b:f2:ce:4e:52:fb:1a:f9:34:b1:16:b4:e5:
8e:89:d7:7b:06:d1:a7:f9:98:c4:e7:bd:ff:cf:f6:
c3:af:af:2f:2d:92:2a:a5:ed:07:40:66:9a:3a:91:
42:75:92:81:98:63:8f:16:1e:3c:94:5a:11:00:ac:
71:57:00:35:52:ec:d9:eb:2c:63:b1:9e:a3:31:f7:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:00:37:BF:6E:54:6F:A4:B6:9D:14:A5:24:EE:3C:9F:41:84:76:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:50:07:fe:27:1a:af:d0:59:9b:59:e2:82:12:64:51:d3:77:
5d:8b:28:81:87:ba:63:9e:82:b6:1e:1c:cb:e6:ad:06:f2:ba:
18:80:0c:8e:52:f1:a8:1b:33:07:82:43:12:77:b4:c1:10:47:
35:87:bf:e6:4c:62:8b:ce:6f:7d:8a:d0:a9:20:5e:fb:e5:63:
23:5b:e0:fe:04:b4:38:40:47:36:6d:95:c4:05:dc:68:9d:99:
b9:bf:1c:93:f5:47:ef:3e:c7:98:5c:3b:78:b8:b2:d3:63:23:
f3:a1:0e:c4:a7:da:02:7b:9a:a9:b9:9a:9d:26:20:e7:20:90:
42:5d:5a:63:d9:f2:f4:2e:0a:3a:e1:30:d6:bf:11:83:34:44:
87:04:ba:09:83:89:17:72:74:71:40:f5:6a:48:d3:ca:b7:a3:
5f:3c:4f:3e:3e:19:ac:72:f9:20:13:67:50:89:3d:30:22:1a:
f6:87:55:a2:91:8c:de:7c:fa:67:a9:43:b8:f7:32:06:6d:c1:
be:de:33:42:f0:9b:51:2a:89:30:49:67:be:aa:6b:56:5d:d0:
86:8b:e4:6b:5f:c8:f4:fd:78:4c:41:c1:2b:a7:b2:d5:a9:8a:
7a:a8:3a:e5:0e:db:1b:b8:26:41:a7:a4:5f:57:45:a3:e1:b6:
a9:e3:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:42 2025 by rpki-client