Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa
File: 4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa (raw, json)
Hash identifier: aw93fxEaXDJ/sDpOBBsyuIwTqfRoN/R1SlNTyNfprvc=
Subject key identifier: DD:BA:0E:1E:E8:93:2F:F7:9D:4E:09:4C:47:45:D8:67:F6:1E:18:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C82270E90E943D2859D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:596::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:82:27:0e:90:e9:43:d2:85:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=05734721-0cda-49fe-8c32-684fe7d598df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:53:c9:61:7b:3a:52:65:8f:ce:95:0c:32:
ee:6d:5a:65:0b:55:23:17:a5:83:cf:c1:df:ac:3a:
85:c5:a4:b1:15:0a:4f:81:a1:5b:26:7f:44:c6:c4:
35:78:ae:f0:89:71:d7:fa:39:4d:f7:f4:b0:87:dc:
15:ad:39:0f:bb:e7:25:87:00:2b:ee:23:8b:ac:06:
7e:8a:d0:b1:00:21:fd:14:fc:48:7e:9b:4f:2b:87:
de:9f:6a:dc:cf:19:3f:39:56:4e:1f:94:eb:88:31:
d7:f0:c7:31:a6:59:79:bb:d5:88:4a:74:56:47:3c:
3b:e3:96:f4:1c:81:13:72:84:2f:5c:bd:f4:bf:0c:
b6:21:ce:68:9c:a8:f0:c3:86:46:1c:5b:9c:98:b9:
e0:a7:cf:f2:39:fe:6b:db:01:76:21:3b:da:bc:fe:
0b:e4:00:bf:97:61:d8:d1:06:2d:02:4d:db:bc:20:
46:55:c8:9d:3d:bc:60:1e:d5:c8:d1:b6:d6:11:00:
00:76:2a:4f:d2:51:64:9e:b8:61:04:12:64:b0:c8:
14:d0:4e:00:8a:cb:52:f9:ca:3f:53:14:41:22:b2:
25:70:91:ed:2a:b6:7e:85:85:e9:cd:bb:67:81:f3:
e1:93:70:b5:c4:e5:53:4b:72:1c:ef:b0:06:10:e3:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:0E:1E:E8:93:2F:F7:9D:4E:09:4C:47:45:D8:67:F6:1E:18:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:596::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9b:bb:0b:c7:3d:92:9d:1b:c8:0f:d2:de:35:66:db:da:82:
4e:03:26:e0:1f:b0:8b:2c:11:d4:23:bf:1e:1f:5e:35:db:dd:
79:14:f5:e5:6d:4e:0e:0c:10:70:d5:7c:d2:00:83:97:34:69:
e0:c6:1e:cf:92:95:d4:0d:e4:d5:33:f9:53:83:21:d0:65:57:
73:89:d9:10:14:75:40:08:6e:be:10:91:b8:d5:79:d5:d9:aa:
92:77:b9:23:20:19:f5:aa:22:ee:d6:a8:98:e6:05:61:45:ad:
a8:29:17:21:43:83:92:25:10:71:9e:76:59:0c:96:de:13:19:
a2:d6:2d:01:0b:06:78:f9:81:ed:53:21:33:93:c0:5a:4d:db:
c7:f2:0c:7b:91:da:a7:95:55:34:c9:35:2c:6a:34:68:31:06:
c7:c9:92:97:b7:ee:4f:09:fa:ea:75:e2:34:48:23:bd:ad:48:
e6:8b:6c:5f:95:1e:91:9d:1b:a8:ba:36:dd:03:7d:3a:5e:d9:
43:e8:53:ba:f4:6c:da:13:5d:21:d6:af:a0:cc:f3:c0:56:96:
38:ea:3b:6c:8e:d1:a1:6e:f0:de:aa:c7:f9:02:b2:6d:18:44:
a7:30:44:5f:15:60:dc:fd:5d:65:36:4c:89:29:23:23:7b:7d:
2b:12:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:11 2025 by rpki-client