Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa
File: f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa (raw, json)
Hash identifier: TchVROlzd/WV+wAnxwc4f3Vryh1EYxp64+pqnKuA1xE=
Subject key identifier: D7:76:B0:8B:AC:EC:73:A2:B8:0D:DB:EF:33:D1:0B:A3:BB:BB:F1:37
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA5639FAC265F4EAF6DE59E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396567
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:39:fa:c2:65:f4:ea:f6:de:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=6bb3f4ee-6384-49db-bd52-509187f72d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:62:8c:35:3b:04:65:2b:51:f1:fa:a4:34:
c3:a3:93:9a:72:92:d7:e2:b5:4f:5c:dd:73:d6:fd:
d9:41:cf:68:f1:f1:02:80:ad:5f:77:80:95:df:9a:
86:0d:e5:dd:d6:40:af:49:00:c0:7c:11:0a:d1:f9:
8b:ed:e9:29:f4:0d:ea:26:f5:22:c5:4a:65:2d:2a:
2d:06:bf:dc:9f:f3:4f:f9:15:21:b8:c2:6e:78:80:
88:9a:98:3c:93:df:f6:09:3e:48:29:73:38:a1:bf:
fe:dc:95:87:f7:5c:f1:68:8d:d9:46:3f:7b:08:a5:
36:4b:29:cb:d6:97:91:60:9a:74:21:5d:be:c9:f0:
0c:5e:5c:15:09:97:e3:11:42:f4:09:4d:a7:07:bc:
cf:e1:93:fc:76:60:03:96:82:84:37:26:94:ff:f7:
44:e4:c5:3e:94:fd:77:ca:bb:b7:d3:c5:64:e9:35:
56:e2:73:a6:00:73:cc:2e:ad:aa:a8:a1:bd:f3:a9:
f6:97:b4:17:89:2b:ad:ef:f1:e3:88:3e:6d:52:36:
97:de:40:66:80:3d:f6:b6:41:01:4b:34:7f:ba:9b:
a5:d5:e2:96:0e:43:f6:eb:8d:0b:3a:91:a0:1e:56:
b5:59:35:0e:d7:63:fe:e4:28:e7:02:70:92:f3:ec:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:B0:8B:AC:EC:73:A2:B8:0D:DB:EF:33:D1:0B:A3:BB:BB:F1:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:98:01:50:4b:2c:1a:61:7b:77:e7:4b:b9:13:27:b9:75:27:
89:77:2f:54:66:04:f9:d3:c8:6e:5e:03:7e:d4:cf:7e:07:57:
b4:49:0d:88:f4:60:d8:90:9c:d4:8d:5b:c1:14:1a:7c:dd:8e:
0f:98:39:43:44:66:c3:81:a1:bd:1a:d5:47:72:a3:cd:e9:2b:
58:8f:b1:49:af:f3:b6:e3:e3:34:85:ff:4c:ad:81:d3:58:59:
d1:3a:64:0c:fe:1e:13:e0:b0:02:05:d7:3f:cf:42:b7:77:96:
26:e7:10:cc:35:c4:bc:ce:7b:dc:30:aa:cc:61:d2:95:c6:45:
8f:39:b9:33:c3:aa:59:72:c9:78:ab:33:88:82:b4:23:76:af:
b6:1f:93:6d:a7:1a:67:62:4d:54:91:71:18:5d:63:ec:be:0b:
53:17:db:33:81:8d:0d:15:62:6d:36:74:7f:f3:9a:08:2c:b7:
b3:a6:dc:14:d1:97:ef:29:fc:a8:06:24:f6:2e:94:ae:e8:38:
93:58:59:11:05:ce:ec:e9:81:08:31:fa:67:6d:4f:89:24:2a:
68:b7:2d:bc:2d:69:c3:2a:f1:e2:89:4e:5a:d6:22:7c:64:fe:
68:24:d1:2e:e4:fc:84:2d:d3:52:85:5b:e7:c2:6c:af:f8:86:
57:81:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:08:05 2025 by rpki-client