Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f0afff7-7c85-3acd-8048-694f6b7eb772.roa
File: 3f0afff7-7c85-3acd-8048-694f6b7eb772.roa (raw, json)
Hash identifier: K8hnfsZFyzgrUtkIdLMKqzDBTbq5M1rfEZ43wK2ACKs=
Subject key identifier: 3C:4E:BC:46:65:E8:90:D2:C0:D2:1E:E8:CF:05:88:BC:8D:2D:4F:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C00D9CBD1DBE1CB2F8F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f0afff7-7c85-3acd-8048-694f6b7eb772.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33651
IP address blocks: 2001:559:c4a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:00:d9:cb:d1:db:e1:cb:2f:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9ddb724c-1c0e-45c3-970f-1f03bb05a6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:d8:f0:80:b8:95:fd:b7:91:30:ba:12:50:
c7:9c:af:04:9e:b4:69:6d:dd:23:05:ab:85:6c:c9:
fc:d9:3e:e0:8d:13:7e:57:04:be:86:63:c7:96:2c:
dc:e8:2e:51:c6:58:8a:fb:04:75:49:ce:ad:a3:9a:
5d:96:63:c8:4e:cb:df:61:32:02:b1:96:42:5a:ac:
4a:9c:04:69:0a:3a:59:41:5a:bd:4d:ed:db:42:e8:
c1:49:51:bf:c3:eb:b7:1e:19:88:c5:5e:16:d3:54:
7f:a5:84:2f:87:49:8a:f3:19:f4:c9:73:a3:7c:4e:
9f:d8:3e:62:ed:c7:53:46:e5:ce:3a:93:2b:da:fa:
a3:98:1d:23:3c:1a:f7:d3:76:8b:cd:06:25:fc:dd:
10:97:6a:d2:a3:41:f1:2a:b7:76:42:67:7a:16:b7:
78:14:5f:78:1f:69:66:33:0a:0a:c0:cf:45:d4:92:
45:1a:ef:8f:1c:82:f5:f7:4c:01:84:b1:22:2c:b3:
e4:1b:2a:30:f1:ba:16:bb:23:37:b6:95:73:f6:67:
d4:f2:c2:fb:ae:0f:d3:77:ce:8c:38:b7:25:9e:04:
5d:e5:2c:5c:80:d7:a7:46:6b:c7:0f:db:82:70:7a:
a1:48:5d:eb:9a:d8:a0:5a:57:6d:bb:1e:ac:33:04:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:BC:46:65:E8:90:D2:C0:D2:1E:E8:CF:05:88:BC:8D:2D:4F:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f0afff7-7c85-3acd-8048-694f6b7eb772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c4a4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:96:4d:c9:eb:cb:00:b9:cc:cd:17:e5:81:d0:f7:5c:ef:53:
e6:66:e1:a8:b4:ab:a0:d8:39:e5:91:9e:2f:6c:ad:ad:a7:de:
42:eb:22:98:b0:77:4e:fc:a3:cb:54:3b:a9:50:b1:a6:53:1b:
aa:20:d0:ee:9c:d9:4d:15:45:50:92:27:2a:62:22:a3:cb:fa:
d3:be:ce:06:0a:97:90:1f:bb:5b:75:0d:e9:4f:80:76:c5:56:
b0:c3:5d:94:48:ec:41:8c:c4:3a:1f:86:8f:09:5a:89:ce:62:
ee:3d:6b:3b:df:88:2e:5b:d8:f5:1b:77:47:1c:cb:27:75:7d:
1d:65:ed:e9:d8:60:69:3b:5a:7d:1d:b8:86:1e:fd:a7:a5:25:
22:d9:82:13:82:bc:78:87:56:74:60:80:db:7b:be:cb:60:43:
c7:a5:e4:69:5d:7b:32:b2:a8:2c:b5:8b:6e:06:96:97:f2:ae:
d3:d5:9a:32:3b:c3:c7:12:14:8f:19:b8:09:34:6f:8f:a2:cf:
10:c0:f7:09:64:6c:03:f3:8e:d6:2e:e4:f2:d3:7c:35:2c:eb:
d2:9d:05:0e:24:f9:0e:30:3c:5d:a0:6f:26:2b:74:3a:93:3b:
64:ec:53:8c:bf:5e:f3:57:62:e7:b3:b8:0f:2f:de:48:f1:7e:
00:59:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:06 2025 by rpki-client