Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd122849-4feb-39e9-abce-2f069fc3cac6.roa
File: bd122849-4feb-39e9-abce-2f069fc3cac6.roa (raw, json)
Hash identifier: z9IQ5deGi9DWs3gSPGuOPVHrxxLHP3ZyK1NI+1Zb5js=
Subject key identifier: D6:2F:31:ED:90:8B:33:62:0D:C1:F5:BB:E1:C4:C4:20:56:09:4B:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C91D77D368E2E1D8DB280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd122849-4feb-39e9-abce-2f069fc3cac6.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:8656::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:91:d7:7d:36:8e:2e:1d:8d:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6884b163-3c8a-4c9f-904d-58ee5a9b5329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:7b:55:b8:d0:9b:14:ac:3c:e2:3e:17:2f:
0f:7e:8f:20:2c:96:76:93:ce:0b:c8:4f:2b:41:c3:
e6:fa:93:30:2d:79:e8:b9:6a:22:66:e8:7e:8c:f5:
b6:88:9a:92:46:7d:de:f1:11:e7:96:54:73:e1:58:
90:5e:5c:5e:03:a2:91:6b:12:35:92:f2:b1:29:3a:
6c:2d:45:4c:0f:6e:5e:4f:e5:60:ca:6e:87:a4:83:
bd:a7:05:6f:a4:97:31:e8:46:ec:ce:f7:fa:83:40:
ec:8d:df:b4:64:29:77:26:04:07:aa:e0:83:78:96:
a5:b4:a1:30:a9:5d:61:5b:35:90:28:b4:6c:94:d4:
07:bc:c7:21:82:0e:4b:5b:de:4b:e5:ec:2f:92:28:
32:1a:fd:5c:a3:d3:07:fb:55:70:92:b2:ce:c3:dc:
de:a7:73:69:5c:a4:c7:7e:0a:84:e3:45:ba:13:ae:
c0:be:ff:eb:bd:b4:d7:89:a4:37:ab:cb:33:bb:9c:
19:f6:dd:24:30:de:e7:7d:67:da:bd:00:b0:98:96:
d2:1e:89:46:41:a7:ac:87:ac:08:25:95:1f:f0:48:
32:1c:7c:d6:6d:05:cb:82:11:9b:96:61:6a:2d:8e:
b4:11:82:4f:fa:6e:0b:68:c9:cd:c3:eb:f3:f6:cb:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2F:31:ED:90:8B:33:62:0D:C1:F5:BB:E1:C4:C4:20:56:09:4B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd122849-4feb-39e9-abce-2f069fc3cac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8656::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c1:a4:73:bb:d0:34:50:12:21:7b:c3:1d:d7:42:90:a7:b8:
d4:9b:35:66:22:f0:2b:b7:58:c3:ec:83:b3:4b:ac:f9:0b:df:
14:6d:4e:cc:a9:2e:e1:56:47:85:5e:7f:8d:46:2b:45:8b:b1:
2f:d4:40:88:05:58:ee:6f:f5:e6:61:b8:81:6e:a9:2e:9b:c2:
b0:fd:14:b9:ac:62:ac:fc:2d:b5:da:d5:9b:e2:3d:4d:df:9c:
4d:0b:03:88:eb:51:6c:bd:73:e6:ff:ce:33:ba:e1:44:1c:e9:
eb:d2:b1:1b:4b:6b:e7:b8:61:b8:e5:32:59:84:2a:41:65:f9:
c6:bf:c9:b8:97:a1:cc:22:e1:f3:6a:81:bd:82:fe:c1:b7:5d:
e3:42:5d:52:5d:e2:e3:47:1a:50:47:f2:92:12:f8:97:4a:d7:
7f:3e:cf:01:37:75:93:3a:0d:2d:3d:1d:86:aa:b5:4a:5a:db:
c4:66:9c:56:a3:48:0b:b1:40:8a:2f:41:f8:2f:a5:b6:62:d2:
77:26:9d:b2:39:32:4e:8a:8d:88:19:59:64:fb:9d:d2:0a:d1:
d8:fa:11:16:03:05:dd:ec:88:c3:14:9b:43:96:c7:cd:ca:c4:
a9:e1:78:b3:db:0e:ee:5d:b2:05:02:0f:e2:eb:8b:50:23:de:
76:2c:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:00 2025 by rpki-client