Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59f05665-b48b-391c-8567-2a6416dff4c7.roa
File: 59f05665-b48b-391c-8567-2a6416dff4c7.roa (raw, json)
Hash identifier: 4Sk0Gj9ZlCIrRsZus2a/JzAu1+5m5metF8TES+A4AtU=
Subject key identifier: 3A:88:F2:91:A8:9B:91:E2:A0:08:77:3C:01:9A:5B:15:20:36:EA:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CBDA4CFC9A5E1B51A3520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59f05665-b48b-391c-8567-2a6416dff4c7.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:2c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:bd:a4:cf:c9:a5:e1:b5:1a:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9c0c5da4-3b1a-4282-ae3a-da04137b413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:18:62:46:bf:d6:2c:85:b6:7c:a4:3b:70:
53:33:f5:a9:4c:3a:9d:54:3f:a2:95:80:ba:86:d7:
1e:e3:34:c7:2e:4f:54:2f:8a:67:6e:3f:65:48:dc:
27:d0:d9:2b:04:92:ec:30:19:93:c3:28:20:8e:6d:
44:3e:49:89:ae:00:62:a4:2b:8b:65:d4:cb:b9:04:
f0:79:fe:25:21:d4:5a:fb:61:e1:f6:50:c4:ad:95:
81:25:99:12:67:4c:07:35:af:f9:97:96:ea:3a:81:
04:2f:c3:c9:6c:2e:d2:7e:7f:65:0e:e4:d4:c5:8d:
51:d8:d5:dd:97:7a:37:86:5d:be:23:f1:79:91:8c:
b8:65:26:3c:1b:42:98:08:5e:e1:28:af:47:97:cb:
68:6e:6a:89:03:59:9a:1b:27:45:bb:2e:7c:b7:28:
53:db:c4:49:24:d0:5f:38:0c:6c:da:92:15:53:d5:
c6:f7:08:fd:b7:59:48:f3:68:74:d1:b1:10:13:1b:
a5:c0:32:d8:9e:ad:e3:5d:17:a3:52:6e:49:f2:33:
3c:95:45:9a:c1:6d:29:32:6f:28:7b:0a:f2:59:49:
f3:a1:3f:8b:e3:2b:dd:34:ac:ad:df:ae:63:06:17:
d9:73:bc:5a:72:45:77:a5:41:1e:08:62:89:7c:07:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:F2:91:A8:9B:91:E2:A0:08:77:3C:01:9A:5B:15:20:36:EA:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59f05665-b48b-391c-8567-2a6416dff4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:2c3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:03:11:31:63:b1:23:cc:04:04:f9:16:07:8a:38:0c:42:9a:
2a:cf:b7:db:97:4a:2c:73:a0:18:61:80:66:16:cf:89:03:67:
30:ca:98:66:70:c8:27:cc:2b:aa:4e:c7:13:51:76:c6:cd:19:
22:bc:0d:48:22:50:4d:89:dd:52:b1:b6:79:04:e3:be:18:0c:
9d:9f:a5:0b:22:c7:7a:97:3a:b0:6a:e2:ad:29:91:da:81:70:
be:46:cd:e3:fe:08:b8:51:d1:0c:92:06:e5:5a:a4:cc:be:d7:
0a:a6:53:fd:fc:30:e4:04:5b:89:85:c7:b5:49:52:07:bd:a6:
86:74:2e:8a:c2:97:09:ab:07:fb:20:64:0e:37:c1:11:1c:10:
28:81:a5:55:c2:73:3f:bd:7b:cd:8d:3e:a8:8a:55:f6:f5:fd:
84:1c:3d:9d:f4:f4:00:ea:f2:0d:63:4d:98:aa:85:ec:0f:60:
1d:b2:1a:07:34:a1:b9:3c:9d:a9:b8:d0:72:41:96:11:fd:75:
07:ed:ea:bb:ad:43:e2:6a:bb:20:00:85:93:54:e3:1f:e9:64:
f7:1a:48:4c:42:72:1a:ef:f6:86:fe:c2:77:15:b4:9d:5f:10:
9a:cc:19:bf:b2:b6:89:c8:fd:fa:04:83:66:fc:75:77:cb:e2:
37:60:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:32 2025 by rpki-client