Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d95cf6d-d942-3670-88b9-8e47a9be0bc4.roa
File: 8d95cf6d-d942-3670-88b9-8e47a9be0bc4.roa (raw, json)
Hash identifier: ub56+XX0r0bKJSOiaXjMa9WLrzNcGju1mWi8TERyboI=
Subject key identifier: 91:13:00:4F:67:7D:1D:C3:C1:98:8F:AF:A2:C5:9E:A2:F9:8D:87:B3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BBA60AABC521778C494E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d95cf6d-d942-3670-88b9-8e47a9be0bc4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7016
IP address blocks: 2001:559:7ce::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:ba:60:aa:bc:52:17:78:c4:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=96a6b23f-e141-49ff-bec5-508c85e0e028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:91:d2:dc:fa:6d:1f:2c:a3:0a:11:ad:42:
58:bf:a9:e7:dd:71:15:07:1b:c1:90:90:82:eb:97:
a8:5a:04:86:56:e7:79:4d:ce:19:59:c3:d3:37:e8:
50:5c:46:e4:79:6d:bf:08:63:09:37:ea:0e:b6:ef:
df:d6:20:8e:12:b3:12:1c:e5:0f:bd:5e:85:cd:4a:
9f:ae:c6:c3:9f:7f:10:a9:1e:d6:89:c1:44:19:c6:
64:95:37:1d:e6:dc:ff:39:7b:33:d7:b8:ba:07:3d:
fa:f7:65:e9:b3:3a:10:8d:68:59:b2:2f:e0:f7:5d:
03:4c:d0:df:9c:fe:1e:34:d6:2e:72:4c:0a:8b:1b:
95:3e:2b:0c:19:eb:22:03:13:4d:54:fe:da:42:b5:
e4:6d:3b:36:9b:0a:17:e2:97:bd:c9:f0:25:ae:c4:
30:31:48:84:de:bc:fa:19:10:77:fd:39:be:93:76:
4f:4e:30:2b:2f:f9:8c:74:34:ac:c2:93:92:f5:85:
de:f2:28:b6:22:28:08:10:40:59:7d:fe:6d:78:b8:
d0:6f:90:dd:cd:1e:13:5f:b0:9f:4e:48:02:90:95:
d7:7c:a8:87:6e:03:92:68:93:01:57:70:a9:2a:97:
df:4f:25:e4:09:3d:46:91:00:0f:ff:04:82:21:c9:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:00:4F:67:7D:1D:C3:C1:98:8F:AF:A2:C5:9E:A2:F9:8D:87:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d95cf6d-d942-3670-88b9-8e47a9be0bc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:7ce::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:48:64:af:1a:1e:c3:92:50:8c:62:16:5f:aa:cc:fc:56:df:
40:bc:d8:7f:33:e9:0f:95:c5:3e:4a:a7:a9:95:0a:62:19:a1:
7d:ee:13:0e:39:4b:97:57:a5:0f:9b:ce:b6:bb:11:09:f5:c7:
e8:1c:0d:91:f0:18:91:c4:af:86:5b:48:8a:6d:c1:f9:02:31:
4f:cc:a8:bd:3e:39:16:9b:02:d1:95:3a:96:87:7f:28:31:35:
b0:6c:72:ad:5d:2c:fd:ae:a9:2f:82:12:b8:86:b9:ee:d5:e6:
e2:cb:dd:a6:90:fc:1d:dc:d7:62:d3:6b:31:bc:d0:69:40:3f:
08:97:b3:28:64:dd:ab:02:7e:3c:ff:5e:ad:f5:15:e1:45:b1:
65:d6:52:e3:fa:b6:a3:2f:fb:43:2d:17:46:20:72:22:58:0b:
f0:a5:ee:bf:73:ce:1f:41:69:73:ea:85:3a:ee:2a:25:b7:c7:
c9:0a:f2:bb:70:3e:f3:da:e8:13:4e:48:c9:ea:cd:b7:19:11:
14:96:4e:9a:f0:68:6b:26:8a:6a:be:66:03:b1:70:78:86:da:
3a:ec:2c:6e:51:fd:7a:bc:0b:af:9b:2b:6f:1b:8a:84:dc:49:
20:12:38:bd:4e:70:cd:f2:3a:47:0f:5e:bd:a2:6e:5e:0a:a1:
35:9e:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:15 2025 by rpki-client