Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a41cb37-c805-33de-b34d-cc8d3708a086.roa
File: 9a41cb37-c805-33de-b34d-cc8d3708a086.roa (raw, json)
Hash identifier: j+Dop0x7fc26Ix+gPvFQOo9GPxU9yg5vjvXmxzooEK4=
Subject key identifier: 9C:D2:D5:4F:87:C9:C7:B5:DE:4B:1C:23:F1:44:4A:D7:D4:6F:36:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D87E8B61E1D770D9ACC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a41cb37-c805-33de-b34d-cc8d3708a086.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33662
IP address blocks: 2001:559:158::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:87:e8:b6:1e:1d:77:0d:9a:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2506c119-be2d-46b4-96ab-599dec55f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:a4:b4:64:95:65:44:0a:35:bf:56:b8:62:
9e:e9:9f:b6:83:0b:ef:60:04:23:00:3b:60:24:e3:
05:7e:cc:64:d1:6e:76:6a:e9:53:a3:fd:53:99:34:
77:8c:a4:1f:40:ba:91:80:c7:29:91:b3:54:c7:e7:
c2:c8:8f:36:5f:60:91:9e:bb:8d:b4:54:81:f0:ea:
f4:08:0c:4d:58:22:87:08:2f:bf:27:ed:46:bf:cf:
bc:15:fc:24:66:92:4f:39:73:54:9f:99:25:8a:51:
77:36:56:51:ab:73:9d:7c:ab:e2:d5:35:f8:c0:88:
f1:90:7f:37:00:49:62:1e:56:22:d6:ae:3e:13:4d:
f3:8e:74:0e:7e:a2:da:f4:1f:ac:e8:68:e8:49:69:
f1:26:11:0f:a0:c7:18:bb:24:97:48:76:51:62:75:
6f:f9:cf:ee:90:21:66:cd:e2:d8:a5:e4:d5:58:35:
2c:d8:cc:e2:5f:bf:d9:5b:dc:36:c6:2c:bd:3a:7d:
ff:16:53:70:00:8f:a5:b3:a0:5a:40:8d:1c:20:d7:
bd:0a:ef:b5:21:aa:23:14:56:36:1b:92:f6:40:e3:
4d:6f:0d:bf:4f:e4:ef:df:52:fa:35:b8:3f:f7:c0:
f2:78:80:aa:3c:29:21:bc:43:9a:b6:b8:b0:ae:20:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:D5:4F:87:C9:C7:B5:DE:4B:1C:23:F1:44:4A:D7:D4:6F:36:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a41cb37-c805-33de-b34d-cc8d3708a086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:158::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e9:63:85:a3:ba:89:d6:72:f6:04:06:a2:41:03:91:59:38:
28:66:9a:f7:11:f7:be:38:7c:74:44:2a:1a:fb:4a:26:66:9e:
89:99:f0:3c:59:c1:f8:32:c0:98:14:41:33:5a:ab:b2:10:22:
4a:78:e7:4a:1f:5b:79:9d:9d:04:22:05:c2:45:6d:77:33:f8:
69:62:fa:69:13:e0:73:83:c3:c3:5c:dc:eb:6d:97:ee:38:d1:
0f:12:d4:10:4b:86:96:00:61:fe:67:a4:a8:03:c7:a9:31:23:
7e:c5:85:fc:e8:b9:b1:2d:44:08:9f:63:2a:df:94:3f:31:07:
1b:2f:27:1e:f5:fe:e6:aa:96:ab:4c:73:e3:c0:d0:26:1b:2d:
fc:58:3f:23:55:4b:03:09:db:e3:b6:0d:20:d5:05:be:9b:6f:
30:4d:a6:af:4c:ea:8b:42:ef:da:b2:ff:86:6e:77:b6:54:3e:
19:1d:3e:32:3f:c2:73:b0:b0:fc:c2:6c:8f:6f:14:a9:f1:c5:
fe:31:49:47:c0:1a:d7:7b:bd:fb:a1:08:fd:e7:88:be:b5:84:
ce:eb:28:41:b2:ad:14:5f:43:25:e3:11:0e:1b:f0:41:e7:01:
69:04:41:af:f0:2d:f9:c4:bb:48:53:c8:10:3a:e2:c0:a6:e7:
a0:30:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:49 2025 by rpki-client