Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1f7e949-eaa4-3743-8b41-0b90d1ec4bb4.roa
File: c1f7e949-eaa4-3743-8b41-0b90d1ec4bb4.roa (raw, json)
Hash identifier: CWxRxfPKJ3AWP6nn1Q5CkcJKshUwNDAIOgoNTKmJBkg=
Subject key identifier: F1:4D:25:48:1A:11:31:2C:0D:9E:8C:2E:4B:4E:AB:8C:4D:54:B6:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CBD72F3E51C64DDA048C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1f7e949-eaa4-3743-8b41-0b90d1ec4bb4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:20c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:bd:72:f3:e5:1c:64:dd:a0:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=adfd8989-dbc9-4f99-bf32-508c5497326c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2b:34:55:b1:a9:4a:32:b9:80:17:93:a9:8b:
85:5d:2d:28:21:de:0a:8c:9b:43:ca:f9:ef:33:d9:
bb:bf:44:e3:08:95:d1:3e:72:74:46:ac:be:ad:3e:
b2:ce:af:36:eb:cc:d6:1d:76:5c:41:b1:7a:93:9a:
48:e5:4d:ea:62:d5:78:e6:70:4a:ac:94:23:46:17:
0c:cb:96:91:ab:35:94:0c:2b:32:72:18:35:81:b4:
5f:58:94:21:ab:e6:fe:12:b3:b9:04:04:e7:c1:5f:
ea:2d:1d:cc:fa:22:d3:f4:2a:31:ba:ab:fb:75:c9:
1d:18:0f:10:43:f0:51:54:02:19:f9:75:c4:1e:37:
0f:78:41:1b:ed:0f:4e:87:13:89:13:af:65:44:ba:
01:88:8f:1d:f6:4f:f8:4c:49:30:c6:97:dc:03:ec:
89:b8:6c:39:ca:0c:b8:84:6c:cd:06:75:0e:b7:dd:
3f:02:7a:21:5b:78:55:c1:29:f0:23:4e:f1:16:6b:
19:ea:77:67:08:fb:48:80:18:cc:c6:49:a4:84:3c:
7c:25:76:87:ca:1b:9a:03:1e:7b:de:7e:c8:8c:54:
93:d9:71:fd:90:a2:66:05:9f:c3:5a:4c:2a:15:0a:
b0:35:7c:5e:bd:9f:67:d8:a0:70:7f:27:78:7d:12:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:25:48:1A:11:31:2C:0D:9E:8C:2E:4B:4E:AB:8C:4D:54:B6:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1f7e949-eaa4-3743-8b41-0b90d1ec4bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:20c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f8:fc:c6:a5:a8:66:72:3d:9c:83:88:f0:6f:db:a8:dd:fe:
c0:cf:66:71:42:c1:64:e4:37:ca:04:4b:7b:ab:6a:f6:d2:f8:
d4:a4:f5:f6:e6:fd:e5:07:d4:d8:7c:30:29:a0:3e:8c:77:3a:
d7:57:a0:33:63:19:33:27:83:a6:ba:4e:69:61:ce:f8:6d:45:
17:6a:1f:dc:63:ea:0c:0b:14:32:4f:3e:e2:e1:9c:de:ba:8e:
88:6b:0c:f4:2b:72:40:85:7c:1d:4d:c2:be:dd:f5:05:7d:d5:
d5:5b:98:f8:6c:90:74:c2:ad:f2:9f:29:67:d0:06:04:8f:d0:
fb:0d:0b:2c:76:e9:9c:9a:72:89:0d:b1:14:e2:5d:15:64:65:
f7:00:ae:4d:82:24:9c:66:1f:ea:95:76:b8:cd:d3:d6:bf:48:
0d:93:cc:38:6c:33:07:07:aa:c8:47:37:65:7b:ed:71:22:6e:
07:a3:1c:13:9d:b6:4d:9c:a7:6e:fd:8d:99:2d:e0:b8:8e:c5:
67:f4:d8:4d:c9:1c:86:e7:35:95:0a:2d:bc:1f:e3:cb:0e:68:
1a:81:b5:e9:75:28:e0:b6:41:61:3e:66:2a:5b:0f:67:f5:cd:
9f:79:dc:ec:c1:cb:98:7d:f8:28:5d:55:74:39:36:e4:f7:6f:
36:4e:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:32 2025 by rpki-client