Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a0fdbe0-3d39-374b-a26d-f3396c5cc361.roa
File: 4a0fdbe0-3d39-374b-a26d-f3396c5cc361.roa (raw, json)
Hash identifier: 58OZ7SGiG1L4jjVlH0TfM4GVHT9O8ckjMQsQJMbNLew=
Subject key identifier: 08:B0:AF:2C:80:A5:BA:8B:9D:52:7F:25:05:2B:EB:39:14:48:47:05
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C8AB74BD6073075EDED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a0fdbe0-3d39-374b-a26d-f3396c5cc361.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:82f2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:8a:b7:4b:d6:07:30:75:ed:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=944761fa-3875-46fc-b33c-f0739d7f5e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:f8:e2:f2:bc:d4:7b:79:71:13:e9:79:eb:
48:61:57:08:8d:d6:91:22:86:be:ad:e1:bc:16:e3:
54:87:7b:4a:1e:ad:41:13:4e:fd:a1:f4:a3:a4:23:
a6:63:cd:b5:b2:03:fc:f1:0a:14:fa:80:66:a7:ee:
0a:31:2a:c8:bd:63:fd:8d:d0:99:38:a7:e6:d6:2a:
c8:6b:e3:02:82:e4:94:49:9f:59:66:40:93:e4:bc:
30:6e:dc:90:02:73:e4:27:55:34:87:7d:97:54:4b:
88:ca:05:b9:ea:ba:b1:39:f9:5b:1d:9f:19:dd:9b:
7e:36:f1:ab:ef:f4:02:94:5a:a7:78:7e:1b:f7:af:
39:25:17:05:03:44:ed:fb:ec:b7:df:d2:51:bb:3e:
6b:bd:fa:52:3b:9e:6a:5a:f2:a9:85:55:f4:a3:3f:
13:a1:f3:68:58:a3:eb:a1:2d:96:27:52:01:46:bc:
57:cb:f7:b9:6d:58:d0:d3:55:03:6e:62:ce:db:fc:
72:8c:97:22:f7:0a:d9:8a:42:10:fb:2c:53:9d:cb:
01:1b:53:fd:4f:64:22:a3:36:9e:0e:09:68:2b:26:
8c:57:d5:c4:92:ca:0f:88:94:6b:8c:75:37:69:f5:
14:47:2e:d4:2d:96:19:16:01:b3:61:6c:89:d2:41:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:AF:2C:80:A5:BA:8B:9D:52:7F:25:05:2B:EB:39:14:48:47:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a0fdbe0-3d39-374b-a26d-f3396c5cc361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:82f2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:05:3f:c4:ba:7b:c9:4a:5f:8b:de:0d:50:d3:09:b3:51:ed:
a1:72:8e:7d:f5:62:dc:12:22:7e:56:87:5b:d1:ee:ba:5e:c4:
7a:cd:89:41:f7:28:7c:b0:d7:fe:ac:fb:7e:5d:ba:d8:02:3c:
3a:35:63:35:bf:69:ae:0c:64:6f:db:de:ad:73:fe:92:9a:71:
24:18:01:c7:e6:1f:61:0e:40:2c:80:c1:31:01:fd:07:45:ce:
6e:4a:6c:53:54:98:25:72:f4:17:a5:06:66:06:c4:7c:e6:49:
f0:32:36:0d:cd:61:81:68:1a:8d:8e:d3:d2:34:bd:e5:ef:a4:
90:b0:77:d5:6f:db:46:cc:1d:8b:96:bf:74:76:e6:67:04:cd:
ec:5c:65:5b:39:09:60:56:2e:3f:5c:25:c8:65:9e:ec:9a:35:
56:2d:53:b7:e2:60:1d:b0:4a:c9:ae:94:68:59:56:1c:a9:6b:
23:cb:ad:f5:95:4d:db:e4:72:24:2c:82:77:43:a5:37:a3:3a:
45:ac:bb:7f:72:8e:c3:d9:36:2b:1b:f0:72:8c:72:ad:c5:c5:
8f:95:db:5c:9c:ca:9c:fa:af:9a:a3:00:7c:9d:21:91:6f:90:
0f:a1:fb:d3:98:bc:b1:50:f2:84:7a:04:e2:65:df:79:cd:55:
c4:61:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:20 2025 by rpki-client