Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa
File: a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa (raw, json)
Hash identifier: xb+IIloC8ccDnTsQ4uyOucCEJlnOmhbkBG9ugCLZ0WA=
Subject key identifier: 16:42:46:6A:FE:19:35:96:47:76:07:08:C8:D6:B7:28:0F:77:62:91
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60CE0614D087BC84CC5BF8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 20431
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:ce:06:14:d0:87:bc:84:cc:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=078fbd6c-667f-4c2c-9c43-2174984f65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:f3:26:03:23:34:9f:17:46:7a:6b:fd:69:
d2:72:17:b5:76:5d:dc:5a:41:fe:80:1d:9a:c0:ac:
94:5f:46:90:6d:3f:a9:60:35:0e:40:c7:15:8d:34:
a3:39:e8:77:12:bc:98:cb:a2:a8:80:b0:49:91:21:
38:af:06:dc:02:c8:8c:31:e3:08:b4:21:96:fc:42:
c1:87:67:ba:0c:89:33:cb:b8:c3:f3:e5:26:e4:ca:
82:07:e3:75:3f:5a:79:ff:2e:7e:b7:41:82:9a:0b:
a0:60:dd:f2:3a:23:69:92:35:d5:ea:b6:f5:91:b3:
a1:c9:21:85:f5:d4:b8:9a:b6:ef:ab:5e:57:1f:e3:
72:2e:0e:d4:5e:66:84:29:15:c8:21:1e:25:50:56:
bc:4a:d3:b6:eb:db:72:3f:07:7b:e9:58:3c:2e:cc:
42:e6:e5:00:40:31:5a:3f:5b:de:e0:79:e8:a2:ac:
f8:81:bb:8d:b1:20:9d:6b:88:3a:43:a6:89:ad:2f:
53:a1:fd:ee:a0:af:68:d6:69:07:ba:79:6b:c1:09:
65:f5:e6:5e:73:a2:b1:7d:e4:e4:a0:fb:8d:a1:b7:
7d:3b:ac:f7:b7:cf:fb:35:49:1e:3f:01:f8:ec:5f:
c3:ba:ca:4b:ad:cd:15:1b:8d:2d:64:7a:26:e3:dc:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:46:6A:FE:19:35:96:47:76:07:08:C8:D6:B7:28:0F:77:62:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:6b:b3:c7:46:9f:12:0f:0c:78:e3:0d:97:29:5a:d2:36:3f:
20:2f:98:15:83:28:0b:a4:3d:89:05:57:39:56:dd:3e:87:e8:
13:09:bf:91:18:b4:e6:24:f5:66:af:e9:02:26:02:1b:dd:04:
18:44:33:d7:15:a8:fc:b7:f1:21:16:a5:7b:93:4b:24:30:3b:
fd:a6:e1:1c:8e:a1:e8:21:48:4a:49:37:1e:a1:d7:2c:b6:70:
51:5b:08:40:73:1b:26:2d:f3:e7:48:11:05:0f:d2:2a:72:b9:
4f:78:38:5f:27:9c:d7:3b:20:72:57:25:35:c6:b9:ff:39:a8:
89:ef:84:c1:7b:2c:a3:52:8b:c2:1b:7e:69:c6:83:10:19:63:
f9:0b:30:7a:e8:e3:80:a1:c3:c2:10:10:7c:2c:c4:a4:db:aa:
69:5f:8a:ea:18:5f:8e:bc:61:ff:2c:62:6c:13:f9:c9:e5:7c:
57:e1:34:c8:97:28:ff:1c:7c:ae:0d:17:db:7d:db:ea:36:a9:
90:30:ca:0d:c4:4a:af:41:5d:d6:19:73:12:83:e5:fb:e3:1e:
04:3a:f3:d5:20:d5:cc:e3:3f:3f:bf:9c:f6:4f:89:32:f4:f9:
fd:da:b4:f6:5b:5f:b1:70:e1:ff:36:34:68:53:76:77:8b:22:
38:ec:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:12 2025 by rpki-client