Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44f69b50-fa86-30e2-a79b-b9b50ee5a1a3.roa
File: 44f69b50-fa86-30e2-a79b-b9b50ee5a1a3.roa (raw, json)
Hash identifier: ni2crNU5kYtZcFcWTXY4k8exy6z8KPoXU+5bjlzXxrY=
Subject key identifier: 91:14:BA:50:AB:88:FE:50:2E:84:A5:18:BC:F2:CC:36:AA:56:91:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C344036ACCED67B89D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44f69b50-fa86-30e2-a79b-b9b50ee5a1a3.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 2001:559:821e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:34:40:36:ac:ce:d6:7b:89:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=05c237f7-1ef9-4842-97f3-bca7eeb55ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:89:20:46:c4:49:a3:e9:44:65:2b:1e:cb:
ce:64:9b:98:77:39:d0:28:80:e9:77:37:34:7d:be:
83:a9:0c:fe:3c:56:47:e4:4f:d9:72:6b:d9:2a:e6:
02:85:ec:92:31:0e:1b:89:93:d8:df:53:64:30:5b:
ff:04:2b:d9:5a:5a:27:f6:e6:6f:7a:1b:32:fb:75:
52:78:21:0a:0f:69:36:e9:4c:5c:b5:31:8f:18:49:
cf:98:e9:e3:4c:ca:66:b3:6c:9d:9f:5f:73:7f:51:
6d:e7:0a:ac:a2:8a:ed:0e:f9:6c:72:61:89:bb:62:
0e:19:c9:31:6a:8b:59:f8:93:78:a8:73:59:bf:01:
83:f4:9f:ea:02:a0:53:d9:95:21:40:3f:93:d1:98:
8c:c3:8a:ba:68:36:64:23:f5:48:2c:ca:38:4b:f5:
ae:2f:9b:16:9d:f5:75:b6:d4:4d:94:11:30:ab:02:
0d:43:5e:da:29:da:24:12:88:89:9d:37:e7:2c:26:
db:f9:b0:86:30:9b:46:19:e0:78:45:ed:68:e2:52:
6d:0b:94:cf:c7:18:ec:33:8f:c0:a3:03:bc:10:15:
e8:94:27:77:31:8f:8c:db:ed:04:54:30:a5:02:59:
ee:cd:ca:ed:b4:7b:d6:43:4d:cf:a0:f6:bd:4d:a6:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:BA:50:AB:88:FE:50:2E:84:A5:18:BC:F2:CC:36:AA:56:91:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44f69b50-fa86-30e2-a79b-b9b50ee5a1a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:821e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:44:15:e4:ab:1e:ac:bc:0a:3a:19:f0:82:83:d1:28:e0:98:
85:de:f8:a4:11:3d:5f:d0:e1:48:b1:de:82:42:dd:5d:04:50:
8f:8d:20:c2:e3:27:73:6a:ab:b4:60:24:7d:83:16:da:96:24:
60:56:d1:a2:56:ed:b2:22:9f:20:0f:25:aa:59:33:84:df:10:
5f:39:d3:35:72:f3:8f:8c:0e:35:2c:ab:36:2e:6f:e6:d5:3e:
25:21:a1:54:af:80:55:5f:8e:94:8b:b4:ac:48:3f:b4:30:3b:
52:ee:22:77:f7:18:4c:c5:ab:c7:68:b5:8b:04:40:a8:76:a6:
e9:52:b5:8a:c3:68:1b:1e:59:41:00:5f:e7:91:3b:ca:25:45:
07:6e:e8:07:55:92:25:16:7a:ec:c6:00:b6:b5:fa:8c:4c:1a:
c5:e3:21:29:9c:4a:64:b0:ea:10:9d:8b:16:69:ba:9a:59:35:
ce:d9:6c:4a:b6:2d:ec:f8:ef:a3:ef:29:14:4a:49:dc:a8:27:
7c:fe:ec:2d:97:da:3d:45:d7:a8:f4:cc:67:1e:57:97:6f:7e:
00:cd:a8:30:c7:3b:e6:ce:44:d2:a9:26:16:74:f6:d3:66:5d:
42:46:8e:a3:22:43:f8:46:0a:b1:2a:0d:09:d8:3d:a1:26:f0:
bc:39:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:54 2025 by rpki-client