Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c16889e-0a23-3c5d-8614-680f48c111b9.roa
File: 2c16889e-0a23-3c5d-8614-680f48c111b9.roa (raw, json)
Hash identifier: 9MiraAL62f1xKx2q0K37qBYoY5OGhKNAjhQUi3RfCpc=
Subject key identifier: A5:E1:4B:C7:C9:D8:3A:2E:F3:D3:42:B9:D8:23:F9:4D:94:96:9A:7D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C9636626798EB03EF6A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c16889e-0a23-3c5d-8614-680f48c111b9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:c3bd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:96:36:62:67:98:eb:03:ef:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d05a6a78-ba47-476e-9204-b69a451ab136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:b3:28:98:f6:51:20:12:b3:f6:46:96:19:
69:4e:c4:92:90:77:93:72:c3:01:96:42:ea:13:02:
52:e5:4d:24:a3:1a:51:dd:7c:23:dd:b2:db:e1:95:
84:c4:d7:63:67:66:28:71:37:92:4d:22:12:c3:20:
b0:80:a2:cc:29:82:59:36:cf:4d:9e:9b:d0:47:df:
08:f5:b4:d6:be:41:43:50:32:68:7b:ff:aa:cb:27:
d9:4b:12:9a:f1:ea:12:83:dc:64:28:09:e1:d9:a9:
be:d2:2e:9b:e5:c0:86:8b:7a:70:f8:4a:00:06:17:
28:fb:bd:ee:4c:65:75:4a:ca:0c:55:f4:df:4e:05:
e6:35:e2:b7:25:8e:fd:fe:84:9e:ef:f4:ac:c4:e1:
7f:eb:10:a9:c8:01:b1:3e:0a:e5:25:16:8b:42:ed:
ce:72:85:83:cf:25:e2:08:3e:85:06:c0:52:67:a8:
63:d0:f1:8e:75:d4:95:79:c4:20:0e:73:c0:7b:0c:
36:71:50:3a:8c:3b:78:bc:b3:c2:b6:ad:0b:e8:e3:
49:c0:01:29:5f:ff:a7:53:d6:a1:ea:0c:ee:3c:1f:
5d:0e:48:dd:e3:0b:9d:56:ab:c7:d4:ef:65:95:91:
ba:3b:55:0b:bb:9e:f0:90:57:03:87:c8:8e:65:d5:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:4B:C7:C9:D8:3A:2E:F3:D3:42:B9:D8:23:F9:4D:94:96:9A:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c16889e-0a23-3c5d-8614-680f48c111b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c3bd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:82:f4:76:47:b5:c5:24:f4:ff:d3:32:05:e0:93:f2:d5:8b:
7a:b9:a4:7b:b6:29:ef:cb:86:2c:62:28:a6:cb:9b:08:bf:dd:
54:e7:ba:44:55:83:c4:44:db:eb:ac:55:4f:51:14:d1:24:ea:
dd:67:34:55:be:72:84:b7:e8:88:82:f7:5c:a5:46:4d:bc:a4:
da:10:8d:53:44:9b:13:d1:ce:e3:56:1f:4b:95:2b:d0:d0:41:
8d:62:47:e6:99:1c:82:ff:0f:2c:a9:fc:68:0a:5e:e4:10:56:
62:51:ab:b4:cb:0d:4d:b5:18:4e:08:07:05:93:66:33:a1:83:
d2:46:ca:4b:73:da:9a:e1:6f:de:32:a8:20:42:23:04:4f:47:
d2:07:09:e6:10:f9:fb:3f:5a:6e:79:64:9f:ce:97:c1:ba:83:
e3:56:0e:3d:b0:02:43:d9:73:72:7c:c9:fc:73:d6:26:a8:43:
30:91:7a:6f:5a:38:17:f2:cf:fa:83:3e:cc:d4:06:cc:95:fd:
71:5c:bc:06:cc:e2:1e:3f:7b:9a:e5:47:e7:73:5c:3f:cb:47:
98:47:f9:21:4b:ba:04:ef:96:43:51:83:78:f4:d9:6f:68:f4:
9a:0a:8f:7d:13:e2:01:f4:b1:29:66:91:0f:1e:25:88:ca:ef:
74:a1:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:36 2025 by rpki-client