Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8be00b9-e489-3c5c-a6de-82634840a10f.roa
File: c8be00b9-e489-3c5c-a6de-82634840a10f.roa (raw, json)
Hash identifier: XiK4fw+KD1ObBuY3FRFltL5mLBRrsIBcdr5GqNh+OmE=
Subject key identifier: F8:48:2F:7E:44:22:16:E8:6C:D8:FF:89:8E:7B:E4:F9:CD:C1:CA:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E266A90A806C88A2CE318
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8be00b9-e489-3c5c-a6de-82634840a10f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 2001:559:2f1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:26:6a:90:a8:06:c8:8a:2c:e3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f3f7a307-1f0a-4dc1-9454-d11b33b87b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:1c:96:b7:a0:10:46:e8:e5:b5:99:10:d7:
2f:99:97:d6:92:59:a0:86:cb:77:97:10:91:c3:c0:
51:66:0d:00:6d:64:f9:ef:f0:d0:9e:7e:2f:73:5c:
00:e5:75:ad:9a:89:44:af:91:19:06:32:84:04:04:
38:15:4a:a4:8a:c8:17:ea:f2:56:93:c0:48:6f:31:
59:9a:2a:04:fe:ca:20:33:4a:b5:2c:7d:06:23:37:
41:fb:ca:e7:f4:2a:d8:8b:25:35:d5:89:b5:e0:3b:
61:48:ee:50:7b:2f:50:14:cd:d6:1d:17:6f:d1:c2:
5e:d2:1a:ee:93:8e:7b:24:c8:57:c7:12:e3:01:a3:
00:e7:38:35:68:55:3d:61:97:d4:86:89:70:77:e0:
31:f3:13:b1:2f:5e:f3:84:4b:d8:67:33:0b:04:31:
b2:b0:64:35:43:b9:2a:73:8f:43:a8:09:4d:b3:92:
f9:7d:b8:12:97:18:62:f7:e7:e1:81:99:39:9a:dd:
ed:64:a0:c4:66:ce:f2:be:03:cf:9f:5e:b5:0e:9b:
98:5d:82:5a:8a:f8:fd:c2:23:4c:fb:ab:18:ab:a5:
6d:1a:72:76:f9:36:c7:f9:d7:1a:cd:7f:17:a4:48:
5c:11:da:be:57:03:5b:d8:19:69:a5:55:a9:d0:1d:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:2F:7E:44:22:16:E8:6C:D8:FF:89:8E:7B:E4:F9:CD:C1:CA:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8be00b9-e489-3c5c-a6de-82634840a10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:2f1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:38:f2:b5:29:7e:99:f6:17:99:ef:ec:66:d4:db:e5:37:d9:
d3:48:3e:54:6e:6c:42:cd:96:ec:3a:6a:1f:4c:1e:42:f6:48:
75:94:bb:3f:f9:1f:9a:2a:79:61:6e:19:df:72:71:7d:87:93:
f3:0a:36:43:3a:b0:7a:fc:79:81:9b:dd:8c:11:29:db:73:14:
87:78:dd:46:33:b4:c5:c5:f4:16:2a:34:2e:85:fb:7d:bc:21:
e0:2e:80:29:6d:8d:01:1b:4d:25:fb:46:a7:28:1c:ec:38:85:
2e:30:aa:25:fb:96:9a:87:48:2f:bc:c1:a4:bf:cf:7f:df:62:
08:c5:fd:1c:c2:cb:3e:3d:b9:e5:43:3b:53:db:52:32:5a:35:
fe:7c:2e:41:5d:fa:33:fd:48:8d:a2:e7:8a:e0:f3:37:78:0a:
da:f4:ec:f5:a8:b5:65:92:aa:d1:a5:f4:b6:fc:20:8d:fc:3f:
56:0d:84:dc:b6:9f:83:81:da:f6:b7:c8:7d:4c:3e:e7:f0:16:
f3:63:dd:3a:93:17:64:d1:54:31:47:b1:bb:b7:00:83:af:04:
7e:ad:1e:0e:94:77:78:c4:20:4f:7e:51:0f:2e:1c:59:e0:38:
69:e1:ea:cf:df:41:b5:90:87:e6:b6:cb:fb:0c:58:f5:82:c1:
35:7c:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:18 2025 by rpki-client