Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa
File: f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa (raw, json)
Hash identifier: PJ7fBBbyPUcr30leFn1Vn39Hh/G48TwHCuP57vaTkMA=
Subject key identifier: FA:FB:B8:1A:00:0D:9D:E9:E1:EB:FB:B3:1C:01:81:A6:74:44:B1:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285847E0885E418696E516A29ED780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa
Signing time: Thu 14 Nov 2024 13:35:47 +0000
ROA not before: Thu 14 Nov 2024 13:35:47 +0000
ROA not after: Wed 12 Feb 2025 13:35:47 +0000
asID: 396594
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:88:5e:41:86:96:e5:16:a2:9e:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 14 13:35:47 2024 GMT
Not After : Feb 12 13:35:47 2025 GMT
Subject: CN=9f4d0003-1430-4d9d-b863-648902732f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:1c:2f:bb:8b:ed:ed:92:81:0a:bb:95:f2:
9b:85:34:06:a6:2d:ae:07:b7:a9:7a:70:0d:f7:0d:
f3:fe:3a:84:55:50:7c:f4:27:d9:e6:45:23:2e:e6:
ce:ca:4d:cd:15:65:98:fe:04:e3:56:5e:df:90:29:
95:6b:49:de:e9:b9:e4:bf:27:61:08:e1:1f:fe:e6:
50:c0:8d:88:f5:87:a9:9f:84:3a:7c:9f:b9:bc:8e:
1f:a6:a3:9b:e1:21:49:86:2b:b8:a9:18:71:59:71:
01:86:4f:07:75:95:a8:f2:28:68:0e:cf:ca:c0:f3:
d5:9e:4a:7d:89:ae:54:60:8f:3d:3d:fa:ca:af:dc:
29:fd:25:30:a6:b5:ad:32:7f:a0:61:b7:b7:09:74:
31:3b:6c:2e:f7:35:79:96:50:eb:23:2d:1d:7a:7b:
d8:b6:7b:e8:4c:9f:18:f8:7b:a5:87:30:8d:23:48:
55:b8:ab:48:fd:68:cf:40:1c:a8:34:96:10:cc:6f:
ff:52:cb:28:11:92:05:99:45:1f:50:ac:91:c0:7a:
8a:22:39:57:73:f4:0c:b5:d0:8d:02:3d:07:b8:25:
3b:95:49:6a:64:a3:84:c4:9a:fe:fb:93:a0:96:5c:
d3:a6:41:ad:4a:29:66:66:1a:29:93:3d:14:03:c2:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:B8:1A:00:0D:9D:E9:E1:EB:FB:B3:1C:01:81:A6:74:44:B1:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:a1:de:25:e8:34:e8:36:96:3a:06:0e:b7:a8:3e:7f:e6:6d:
7d:7c:4b:29:64:63:93:9c:70:39:fc:1a:60:3c:1b:53:01:05:
1c:75:20:dc:46:66:da:2d:f5:d4:49:22:a6:53:39:65:3d:80:
88:fd:8b:d6:ff:ca:b2:d7:ae:83:c5:5b:49:af:c6:d5:1e:59:
09:f7:0e:b5:aa:a9:43:41:bc:52:b9:7c:6c:8c:5e:4e:98:6c:
9c:13:ef:e5:80:2e:68:e7:2c:eb:dd:dd:53:a3:f2:b2:ba:be:
32:e7:93:7d:ee:55:5f:3f:f9:e3:1a:9a:b9:7d:a5:4b:c7:91:
12:dc:e3:1d:62:49:77:b0:51:29:26:7f:52:a7:34:aa:34:5e:
84:db:bc:66:9f:2a:21:90:0b:4e:1c:26:81:e3:ae:63:b1:0d:
b1:42:bc:6f:a7:11:2e:5c:1b:9d:eb:21:29:11:35:8b:5d:11:
19:b9:27:71:66:31:5d:44:4b:cc:e3:d8:d6:0e:ae:18:df:31:
a4:58:ae:c5:4e:a7:20:96:0e:f2:d3:de:94:4a:86:df:33:02:
18:21:cf:8a:f6:26:ed:36:61:0f:ef:65:ce:70:bc:a5:2e:8b:
87:ec:79:41:55:42:3d:fb:1c:7b:d1:34:9e:bc:51:93:e8:1a:
f0:06:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:11 2025 by rpki-client