Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d7d3a1e-9d3d-3c45-94d9-a38e933eab00.roa
File: 5d7d3a1e-9d3d-3c45-94d9-a38e933eab00.roa (raw, json)
Hash identifier: foY/DbExRD6M/icOrchFeaIJd92SO5LDDp0dr2VoaWs=
Subject key identifier: A8:68:04:C5:9A:79:4B:8E:22:C4:BB:52:47:9B:23:D5:67:C1:7D:16
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E25D83D6EC3AB6FA5F480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d7d3a1e-9d3d-3c45-94d9-a38e933eab00.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:1c4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:25:d8:3d:6e:c3:ab:6f:a5:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8ba55d10-ef0d-472a-be73-bcc3d4acd6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:08:e5:fb:96:47:43:77:79:6f:a3:b9:6d:
47:d1:7d:ee:b0:64:14:04:31:d1:7d:cc:16:8b:81:
36:99:df:c4:b8:70:74:6d:d5:c2:7e:39:b0:9f:2d:
dc:00:01:c6:c8:0b:05:e3:38:e6:57:e1:74:59:23:
9e:8d:b0:ef:f4:dc:48:4b:1e:57:2b:53:eb:f7:f4:
66:73:03:fb:d5:26:ca:3d:61:b8:39:06:02:8a:bf:
a7:10:55:d5:2c:c6:74:46:79:4e:90:9a:77:22:f0:
a4:5f:cf:79:f0:a0:67:85:32:a2:09:af:95:25:10:
44:55:55:23:eb:3b:7f:28:30:51:3b:a1:6d:d2:6f:
22:83:9c:9e:d7:62:15:96:6f:90:8b:17:d4:75:70:
18:fe:33:dd:1f:84:93:b4:db:ce:87:3c:fa:0c:69:
70:ff:3b:58:9d:c9:8a:6a:3e:3e:4d:d6:0c:ff:0d:
4d:1e:56:e1:76:5c:46:fc:f5:90:f3:67:0e:ed:e5:
33:ca:e0:5e:4d:cc:f1:f0:09:72:30:67:62:8c:76:
8c:a1:db:34:cb:6c:19:97:41:f1:b0:76:8c:23:d8:
6e:bc:ff:6b:12:40:54:89:a3:b7:c2:b0:5e:01:c1:
8f:08:81:79:27:df:b4:5b:cf:9b:4f:97:20:43:55:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:04:C5:9A:79:4B:8E:22:C4:BB:52:47:9B:23:D5:67:C1:7D:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d7d3a1e-9d3d-3c45-94d9-a38e933eab00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:1c4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:69:b8:a7:43:9a:80:c1:2a:09:1b:11:09:af:ba:f9:ae:d7:
92:ed:06:33:7f:37:ce:51:12:1d:9c:8b:06:e5:21:44:68:a0:
df:c6:9e:9c:c8:19:ee:92:38:2a:28:92:bf:1b:3a:57:eb:7e:
6e:7e:b8:4e:3f:a4:de:79:28:fc:3e:b5:ce:b7:67:b1:17:e5:
bd:c8:86:cf:40:f4:b1:44:cd:18:d0:2f:d5:89:e8:b8:01:b0:
03:c1:60:6d:6a:7f:8b:1a:c2:d5:9e:d0:8e:50:3e:60:85:3b:
bc:5d:09:9b:2f:ab:84:bf:b0:ea:63:46:a8:76:7c:c7:46:e8:
f9:2d:44:98:a1:7e:a0:11:71:ae:ab:00:97:05:52:bc:87:f8:
74:8d:02:40:10:04:0e:c8:c6:72:f6:a2:59:b5:8b:6f:7d:ad:
9c:32:10:fa:bf:bc:03:a5:b1:b8:1d:b2:d0:d7:d6:30:48:e2:
8c:29:67:bd:e4:92:c8:5f:1e:11:82:26:a6:6d:6f:04:9a:dd:
38:29:e8:c7:26:47:d0:d1:f7:84:ff:fd:6d:4f:4b:7c:f6:7f:
9d:03:04:f0:98:e7:53:38:ba:f1:9b:93:dd:7d:3e:9b:e9:62:
b4:03:e0:e0:b7:35:71:39:1f:52:08:35:13:f1:3f:ae:f2:89:
d1:31:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:15:27 2025 by rpki-client