Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d6b571-54d6-3c90-b60a-2b309e11d3d1.roa
File: 89d6b571-54d6-3c90-b60a-2b309e11d3d1.roa (raw, json)
Hash identifier: IWdb/aaATg102ll7l49GA9zfE36sFpjl4i/Jzh8L/sQ=
Subject key identifier: 97:F5:E5:B4:64:B4:30:29:1F:34:F4:2E:33:D5:1E:28:55:33:0B:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DE4E6835DC947458A2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d6b571-54d6-3c90-b60a-2b309e11d3d1.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:8372::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:e4:e6:83:5d:c9:47:45:8a:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f306f094-e5b6-4e39-bd7b-8d4f4bab75e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8f:68:d9:f2:cc:0e:8e:34:e1:54:d9:2c:61:
4b:3a:a8:62:ae:80:3e:15:c7:23:f8:88:88:24:ce:
37:4f:ef:4e:32:97:15:30:82:6c:02:e1:ce:c8:55:
45:53:91:35:44:47:7b:cc:0d:a8:f1:93:c2:68:6f:
02:2f:9e:41:08:7d:5a:a8:b7:f5:6f:d3:60:28:5f:
ac:0c:f3:0f:2a:97:77:fd:90:41:00:1e:34:d3:5f:
e8:cc:e0:e2:5b:de:d4:4e:75:9e:5b:26:81:bb:9b:
e0:e9:fa:fd:11:ae:6e:91:c7:d3:3f:29:35:90:9a:
0c:17:8c:8f:88:43:cb:87:17:2e:39:37:34:0a:f8:
f1:d1:88:97:64:4e:96:a7:93:11:f3:6c:ae:35:d1:
4d:66:29:37:a1:20:f9:6e:72:12:a5:0d:e9:b8:53:
78:02:d3:f6:41:e2:9a:e9:94:fd:fb:03:b4:21:58:
9b:fd:ae:0b:b3:83:4a:61:2d:a6:ec:30:a9:72:b8:
e6:7c:4d:e6:4f:5a:8b:c6:c8:b2:45:24:50:89:a9:
f2:56:78:24:72:5a:24:08:eb:7c:4d:af:ea:59:76:
52:3e:ae:45:1a:b0:68:a8:aa:23:9b:5a:05:a2:b5:
a1:39:21:db:69:02:70:01:93:be:f6:50:10:7a:d7:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:E5:B4:64:B4:30:29:1F:34:F4:2E:33:D5:1E:28:55:33:0B:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d6b571-54d6-3c90-b60a-2b309e11d3d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8372::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:9b:64:b6:2d:97:5a:0e:8b:e1:42:80:42:98:1e:aa:fd:46:
15:51:b5:2e:25:60:70:8a:cd:57:d2:df:98:28:79:55:e5:8a:
d8:5e:50:45:22:f1:87:0f:e8:9e:c7:60:a3:94:ca:d7:e3:c1:
07:59:46:e6:29:ec:cd:81:3b:99:46:25:8a:a1:26:ef:a7:9b:
14:4d:67:66:5e:48:86:37:1e:9f:d2:08:e0:fa:1d:2f:19:b5:
00:d7:b0:c3:e0:e2:6d:a6:15:18:00:4e:a4:df:22:83:32:aa:
ff:df:aa:a4:6e:cf:bf:0a:bd:b3:da:81:cc:1c:5e:e5:46:d9:
b0:fd:53:01:a3:b4:7d:90:cc:d8:b2:61:a9:f8:e0:cd:8d:1b:
ec:1a:f5:20:8c:1b:da:98:da:ee:c3:03:fb:b6:54:1e:2c:bc:
35:e9:94:71:d7:1c:b2:2d:a8:6c:cf:84:81:60:98:df:4b:5e:
66:0d:72:84:8d:e1:76:15:91:ad:ef:7e:b5:5f:cd:7e:fd:d6:
68:c9:2e:bd:a9:eb:fe:71:8a:bb:ce:0c:42:5b:ec:9b:5a:04:
31:27:7a:35:53:30:bf:8c:c4:73:10:61:74:dc:9d:c8:16:9a:
e7:69:9a:60:e4:cd:b8:bc:c8:0f:6b:bf:60:ae:2b:9a:3c:89:
56:d6:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:04:01 2025 by rpki-client