Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e73c33-5000-301a-8334-2ac5b5954a8e.roa
File: 29e73c33-5000-301a-8334-2ac5b5954a8e.roa (raw, json)
Hash identifier: 4pNke5DJZJhVa2FeYc0sW8Npx2gFION4uH2zatWA6kw=
Subject key identifier: 2D:F8:E2:FB:79:C2:C9:A3:01:90:51:DF:79:AF:AD:B3:C7:82:6D:BD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C8510F6ED8590360C83C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e73c33-5000-301a-8334-2ac5b5954a8e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:764::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:85:10:f6:ed:85:90:36:0c:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=95157be4-19e8-4fbf-8aec-e1ee1bf79e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c6:cc:ee:f5:5e:0a:a5:85:0a:ec:0f:96:a6:
94:58:3d:cd:66:e8:b3:e2:ff:55:23:a8:58:d3:fa:
3d:40:10:d8:20:93:da:fa:0a:6d:b4:a8:24:4b:5c:
e9:db:c4:3b:84:23:96:47:13:eb:9e:57:87:a3:50:
00:1d:2f:a8:1e:e4:81:15:10:a9:f5:ae:b0:c3:96:
39:b7:97:9f:11:bc:df:38:7f:c2:77:0b:a3:5a:c0:
16:46:f5:09:02:f7:af:b0:29:a0:a5:98:9f:70:90:
04:5b:dd:48:23:0f:c4:2c:bb:e4:2b:53:61:6c:dd:
44:2f:0a:85:34:47:0b:6a:39:97:4a:61:12:29:cc:
37:7f:dd:fc:1c:2d:17:a0:64:bb:04:e7:35:f5:49:
aa:75:41:e9:fc:7f:70:7f:0d:ff:89:eb:b2:82:2a:
71:f2:f4:e3:f0:c9:84:3a:f4:91:ba:8b:c3:69:cb:
8e:fb:92:5c:91:45:fd:ed:64:e3:f7:09:8e:f0:7f:
0c:0d:df:7a:f1:c2:2b:e2:dd:8f:4b:89:f4:13:29:
dc:be:f9:45:32:dc:9a:96:1e:95:ef:a3:c8:7b:c2:
b0:1c:79:fe:6e:25:ff:2e:24:55:c5:00:4a:79:4f:
83:d3:60:d2:0f:33:e9:29:90:73:50:fe:de:7e:41:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:E2:FB:79:C2:C9:A3:01:90:51:DF:79:AF:AD:B3:C7:82:6D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e73c33-5000-301a-8334-2ac5b5954a8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:764::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:20:ce:b8:1d:2c:f4:0f:0b:e1:8a:06:90:bc:c8:c1:d3:79:
28:b3:5a:cd:c4:d5:e2:87:89:e4:89:e7:ac:f7:24:4a:d1:64:
89:64:53:b2:4e:04:28:cd:6b:e8:a0:98:6a:5b:36:21:24:08:
60:64:8a:3f:76:9c:2d:a0:fa:e9:f4:18:4c:31:cc:90:5d:9c:
7e:ef:86:96:07:3d:cd:5d:fc:ca:f5:28:8a:63:fe:d6:66:bb:
ec:cf:44:25:70:b0:5b:53:8f:2f:b6:1b:73:a9:bf:74:92:7f:
f8:f1:12:80:11:5c:9d:50:2e:75:af:dd:98:a9:e5:a1:d5:d0:
23:55:ad:fc:0b:03:f6:ef:05:f6:42:69:75:25:16:c2:82:2e:
a7:ba:63:a3:5d:14:81:5e:85:00:06:24:a0:f2:a6:77:7a:13:
9c:6e:17:63:ab:00:e1:22:3e:6b:23:d5:d4:53:43:df:f9:a4:
50:6a:78:7c:94:7e:08:13:ed:40:c5:bb:d2:39:8b:e7:60:f5:
f0:94:d2:f3:55:41:b6:2d:85:04:a8:da:21:9e:15:25:e9:38:
3e:9e:96:84:c5:fd:87:76:46:76:fa:ba:1a:c2:13:cb:84:0b:
2d:de:c4:5d:3b:ae:42:10:7e:27:47:18:ea:1b:2c:5f:62:75:
71:e2:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:18 2025 by rpki-client