Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a655ff64-47a3-37eb-aeb6-300fd73c4305.roa
File: a655ff64-47a3-37eb-aeb6-300fd73c4305.roa (raw, json)
Hash identifier: CF1U2QKsE/HPL+uC872b/+9ApXscPqLTJLxMfd7zhrc=
Subject key identifier: 94:1A:05:67:D5:7D:67:44:AC:59:C8:4B:14:4B:88:09:47:0A:0F:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D48938882824A7BDA8440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a655ff64-47a3-37eb-aeb6-300fd73c4305.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 21508
IP address blocks: 2001:559:c1ca::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:48:93:88:82:82:4a:7b:da:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=cdf9883d-17f7-48cf-ad79-f9f5c7a1f778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:a5:3a:bd:a3:39:29:79:71:26:b0:44:1a:
df:2b:3b:9c:a6:4d:8f:cd:98:5c:be:6b:06:83:5b:
f9:f9:dd:e3:70:3c:22:df:4e:2e:92:cb:27:a7:8c:
04:d0:a9:dc:8f:f7:ec:c0:22:b4:39:96:1a:0f:2c:
e1:9a:3d:c2:55:6d:4d:d3:9d:c4:ea:30:f6:46:c4:
58:bf:d9:27:ed:61:e4:ab:1c:e7:60:33:30:6c:9b:
f1:fb:b6:99:74:0b:dc:f2:ab:9f:43:f4:8e:49:34:
23:79:53:9a:bb:0f:39:30:9f:a3:19:6d:7c:7a:46:
e5:52:17:ee:75:8d:41:26:bd:b0:eb:4d:a5:cc:99:
e2:b1:ec:ff:f6:21:6a:ee:45:34:9c:44:93:c1:ab:
74:9f:d8:2d:f1:b7:40:87:ed:cf:8a:da:d7:ed:20:
5a:fb:43:2d:de:d8:7b:c6:3a:b3:aa:a4:42:bd:9b:
6d:fe:81:c7:08:cc:da:d5:a1:af:c7:0b:23:0e:4f:
5d:a9:e1:03:c0:5b:6b:ae:50:65:a0:33:7c:eb:90:
1b:55:49:7d:49:38:c6:ea:5c:c9:13:d4:2f:d9:b4:
0d:36:fe:27:38:ec:2f:ad:b4:2a:ef:ab:3c:01:5a:
4f:e2:ee:4c:37:af:2e:3a:11:39:c1:5e:60:d7:d1:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:05:67:D5:7D:67:44:AC:59:C8:4B:14:4B:88:09:47:0A:0F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a655ff64-47a3-37eb-aeb6-300fd73c4305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c1ca::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:7a:61:5b:1e:2b:12:5c:e1:5e:fa:2d:ac:20:96:e8:8f:8a:
42:5b:13:d3:89:a4:05:76:06:34:cd:70:62:9f:a4:61:45:04:
7b:f6:c8:7f:f3:0c:c8:4a:ed:7c:df:56:45:63:f6:56:13:c2:
e0:fa:6c:71:3e:bd:22:27:21:fb:37:f2:32:53:d9:4f:a6:cd:
97:2a:a2:fa:9a:87:57:be:6b:7d:b3:19:7f:c3:85:24:86:75:
b9:2e:d7:5e:ab:a3:e2:73:77:2a:be:e9:b1:f5:1a:be:3e:79:
bb:af:da:30:84:39:fc:97:77:43:1b:0f:20:02:c9:a0:ea:1d:
ee:1a:ff:97:f8:1c:87:42:33:1b:25:f5:ae:f5:36:f9:ff:4b:
d8:c9:d9:68:31:8f:0c:b1:1f:04:d1:71:17:6f:7d:ae:3e:db:
0f:67:aa:af:83:d5:07:68:43:1b:18:78:ab:ca:aa:55:7c:99:
56:6a:01:0c:d4:44:e3:ee:5d:53:d5:f7:9d:94:7a:d7:ae:36:
38:69:35:33:8d:8e:65:e8:f8:00:35:86:f9:9c:e8:43:63:d0:
a7:67:12:3a:13:9d:7a:b8:56:25:b4:69:39:7b:e2:40:47:6e:
e5:0e:5a:07:94:5f:a7:ce:f9:59:41:36:51:ae:50:6e:71:ba:
5e:6e:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:14 2025 by rpki-client