Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ce1c38-f057-30f7-92c9-35c918c73b03.roa
File: 38ce1c38-f057-30f7-92c9-35c918c73b03.roa (raw, json)
Hash identifier: NE8IPGcP41ScUy7sIecA3j0WT9nPChH7rnkUXNXlBCc=
Subject key identifier: 57:AB:91:4B:85:12:AB:D2:16:B6:19:4A:1E:E2:2D:C0:E1:98:ED:76
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D25991CE1185A12073F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ce1c38-f057-30f7-92c9-35c918c73b03.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7016
IP address blocks: 2001:559:33c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:25:99:1c:e1:18:5a:12:07:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8e4557b1-5e2a-481b-a013-6607b41a45a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:cc:8f:8a:6f:74:97:b7:f1:ae:fd:76:df:
9b:a5:56:a7:04:4c:46:5f:2d:38:9c:47:d9:2a:c4:
76:2f:76:ad:60:63:bd:0e:3f:f6:ce:b3:86:95:21:
e0:e5:3d:f4:a3:85:6c:2c:98:a4:91:19:be:f2:55:
0f:71:83:1a:01:05:d2:28:dd:6b:02:2b:bf:0f:8f:
b5:8c:d1:70:d9:c4:b1:c4:78:6e:78:d0:ad:8f:6a:
11:0e:38:53:47:9b:bd:1c:e1:44:ee:34:e3:ee:79:
01:8d:20:b9:62:da:31:07:d5:cd:06:79:1f:67:31:
ba:b6:6c:ad:cb:a8:7c:96:fd:1c:72:c9:90:12:49:
bf:11:59:4a:c0:07:26:9f:8f:3a:33:3e:c2:43:b9:
04:bb:a1:45:d0:6f:0a:ef:e9:c7:96:b7:66:f5:d3:
6a:19:bd:3e:7b:cb:a9:dd:3b:b3:01:90:91:b2:f5:
43:02:bf:0c:1d:4d:de:5f:2f:44:5b:c6:3b:b6:0b:
29:e5:4e:0c:70:04:e7:74:5f:91:93:4a:81:75:f8:
10:32:3e:0c:99:c7:9f:fb:68:a8:38:b0:46:90:0e:
01:38:12:b1:96:97:1b:c3:94:73:d6:e0:e7:50:60:
bc:6e:d2:55:6b:96:61:7d:c7:39:76:0b:0d:a5:59:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:91:4B:85:12:AB:D2:16:B6:19:4A:1E:E2:2D:C0:E1:98:ED:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ce1c38-f057-30f7-92c9-35c918c73b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:33c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:83:dc:ac:10:d0:44:8b:a6:bf:e2:e9:e5:fd:c2:27:c6:f5:
2a:57:fe:85:7f:22:60:6f:b1:26:a2:ba:72:98:e9:29:0a:ee:
08:36:53:c1:6e:73:d6:ec:9e:21:e9:46:f7:20:eb:e8:66:5f:
d2:fb:3f:1f:67:fa:91:ba:38:9e:ce:1f:10:fa:e3:82:a1:ce:
8d:a8:6a:3a:f8:ee:22:2c:9f:1d:d6:3c:e2:18:32:b7:d2:2f:
29:46:55:47:c5:c0:0a:be:61:a8:45:de:cb:a6:29:92:44:82:
aa:4a:b3:62:b5:5f:57:e5:6c:30:f6:37:76:01:a1:18:5b:f5:
a9:40:72:12:ac:28:c9:9d:fa:95:ac:23:72:50:1d:22:de:ab:
69:09:1b:fb:5e:01:c5:9a:77:7d:23:69:0c:26:38:69:3d:fc:
80:0a:ef:31:2d:40:49:26:f5:a2:2d:1c:2a:0b:74:6e:54:bd:
8c:51:e8:0d:89:7a:de:33:02:9d:50:23:44:d3:8f:52:bb:aa:
06:c0:13:20:d7:76:f8:1a:09:d1:ea:d4:9d:1a:2f:1b:ae:e6:
0e:0c:18:c5:e8:1a:00:dc:b0:c8:e9:a6:35:46:ba:62:a5:c7:
18:ee:41:81:ce:ef:92:24:f1:2d:8e:c9:79:59:72:e6:15:6e:
f9:12:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:20 2025 by rpki-client