Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62b8c5bf-9c8a-3a23-831b-ec888efc2945.roa
File: 62b8c5bf-9c8a-3a23-831b-ec888efc2945.roa (raw, json)
Hash identifier: g9rNfGr4AITBh83KS3X3uuaO4v19IxA81XBKJSonn8c=
Subject key identifier: DD:64:00:1A:61:90:9F:3A:C3:94:1D:D3:57:5A:BE:39:EF:59:D1:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E27F655979901AB12C900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62b8c5bf-9c8a-3a23-831b-ec888efc2945.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:27:f6:55:97:99:01:ab:12:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9d42f1e4-882f-4c21-bfa5-d710a25a5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:54:dc:b3:78:14:7b:0c:eb:5e:3d:a5:3f:
37:1a:b9:10:6f:39:ca:bf:68:72:7d:09:51:94:58:
d8:d3:95:9a:4a:b9:72:c8:68:26:66:c6:92:fa:64:
a5:28:a5:c8:a1:7d:e2:9d:d9:fb:da:d6:bf:bd:92:
88:13:22:44:32:49:22:65:c4:01:79:5a:b7:04:0c:
53:c0:39:99:95:85:f9:6f:02:ff:0e:f4:c7:f0:6e:
86:47:7e:f3:e9:f7:d1:b6:3c:82:5b:19:6b:e6:00:
f1:8f:58:00:86:bc:1b:a4:52:a6:09:e3:bd:75:24:
b7:3e:70:32:ea:d2:b6:5c:3c:0b:63:87:90:3d:8a:
06:b5:71:72:32:49:49:65:e8:a1:19:e8:bf:53:1a:
23:67:85:49:dc:b9:d0:27:1a:ae:06:e7:44:49:e4:
e5:36:d1:bd:f8:29:a0:58:3b:3a:b1:96:7a:05:96:
3e:ab:b4:b5:df:ff:62:6f:71:38:9e:a6:67:74:f1:
43:bc:aa:28:fa:60:a3:f2:4b:c0:13:4b:67:7b:8b:
3d:dd:52:88:c9:4d:f1:ac:6e:7a:ca:0e:2b:c4:9c:
fb:11:92:e4:6a:78:22:f7:a2:62:ad:5a:6d:aa:63:
e1:12:e8:a5:46:31:3c:30:62:e9:4f:53:eb:c6:0c:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:00:1A:61:90:9F:3A:C3:94:1D:D3:57:5A:BE:39:EF:59:D1:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62b8c5bf-9c8a-3a23-831b-ec888efc2945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:700::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:f0:5f:86:7c:46:66:26:9f:9b:4f:eb:f5:f7:68:74:74:6a:
44:bb:1a:cb:5d:35:10:d5:79:5a:03:59:16:a4:61:4b:6e:09:
d4:d8:5c:4d:5d:45:14:9c:09:12:d7:94:12:1c:6e:ec:28:da:
b4:1e:6c:ba:28:01:b4:ea:ec:a4:07:21:b9:ce:20:e8:82:f6:
15:58:46:bd:34:93:04:0e:68:c3:52:fe:95:f4:40:84:dd:7a:
2d:e1:b6:71:21:23:9f:ce:ab:4e:84:1d:af:a0:38:31:44:c5:
5b:57:92:7d:56:2d:c4:ef:66:63:a1:27:9d:a5:46:92:7e:b2:
2f:c4:12:1d:f5:3a:85:84:97:2e:10:2f:75:90:0e:69:3d:1e:
de:38:8c:cb:e9:56:97:b4:49:a3:c7:a0:7f:dd:24:4c:6a:0b:
89:f5:ff:96:5d:96:f2:c0:71:44:de:cb:d5:ae:14:7b:7f:7c:
50:d5:1f:d2:da:97:13:12:45:1c:1d:65:41:a0:fc:fe:0a:fe:
7f:55:d6:be:87:d5:fd:e7:08:59:d0:2a:3b:fc:f8:a9:36:47:
99:23:fe:a7:90:e0:05:9f:39:a7:0c:31:e4:21:18:d5:50:ff:
c0:bb:76:eb:a7:c6:b3:fd:7c:51:47:b5:fa:f0:3e:94:3b:2e:
fa:25:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:04:49 2025 by rpki-client