Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8cadb4f-e967-3713-9f75-0f4966cd3f6e.roa
File: c8cadb4f-e967-3713-9f75-0f4966cd3f6e.roa (raw, json)
Hash identifier: ZUrtxZFcKkJGiW+vQ8zFLn7Y/QDYJay/os+wU3UoMA0=
Subject key identifier: 27:D6:7A:05:42:65:76:A6:E0:42:83:FB:7C:49:BD:2D:55:B5:57:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DAB25D236959CC2BDFC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8cadb4f-e967-3713-9f75-0f4966cd3f6e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 2001:559:82c7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:ab:25:d2:36:95:9c:c2:bd:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=40f73dc3-c42b-4a8f-81de-6e67e4f1d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:20:18:04:a9:e0:10:f2:a2:49:82:49:18:
83:a8:04:df:7f:84:53:38:a9:e1:cc:46:a2:09:2d:
19:69:ae:ed:05:df:ef:32:c8:2a:a5:27:90:48:49:
e3:23:61:8c:00:9a:19:43:b9:1c:7a:84:84:6c:a1:
b3:72:1c:ca:fe:32:41:f2:8b:6e:46:1b:05:d1:06:
90:31:54:57:7b:62:0b:fb:72:66:c3:e7:42:84:d1:
b0:f8:91:9a:70:e7:f0:f3:9c:68:22:e9:78:aa:d1:
01:a4:17:2c:63:4f:30:00:c6:2c:ad:76:48:53:f7:
6e:28:4c:aa:b5:a2:9b:f6:15:47:da:c2:9d:77:76:
7a:8f:b1:aa:e0:06:f2:09:34:39:cc:f2:b1:25:e0:
59:5a:e5:7a:e0:dc:75:c7:18:1c:e5:e3:be:94:f4:
38:af:13:60:e3:01:5e:0e:ab:b8:4b:db:9e:5e:4f:
ed:21:61:61:56:d6:83:7d:d6:51:51:80:38:c9:71:
90:2d:a4:1d:17:3e:66:ac:a7:59:3f:6d:aa:71:72:
d8:5d:d9:0b:40:4f:4a:76:22:cc:b8:54:8b:98:b5:
d8:86:95:b4:62:21:1a:98:d8:91:08:a4:19:98:d4:
3f:3e:da:43:55:31:bf:e3:cd:a8:06:c0:25:ae:78:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:7A:05:42:65:76:A6:E0:42:83:FB:7C:49:BD:2D:55:B5:57:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8cadb4f-e967-3713-9f75-0f4966cd3f6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:82c7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:e1:1a:37:1d:37:bf:00:bd:9c:8b:e0:cf:7f:18:4f:e8:b7:
40:e2:4b:ef:62:e2:13:be:00:f1:e5:58:89:16:5b:90:ac:33:
16:b8:ae:b7:4e:ab:43:da:f8:99:85:4b:e2:c4:64:cf:2c:66:
81:12:be:e4:2b:11:b1:3d:2f:0e:1e:70:03:ec:c7:41:99:27:
78:b2:30:a3:80:cb:97:85:b5:69:77:34:e8:25:64:33:e0:32:
8e:c8:6e:60:c3:8b:50:a3:ec:93:5e:8e:aa:bc:7e:8c:6c:18:
2a:62:46:9d:3f:46:ff:fb:77:25:a5:44:2f:a5:e0:42:d5:fa:
45:93:f8:5b:1a:57:e8:fc:ff:80:99:a1:cc:30:3d:9c:71:1e:
32:a2:54:a7:67:bd:53:02:90:0b:d1:45:57:1d:c3:e8:3e:6b:
3a:5c:ba:6f:a9:50:eb:2c:ef:ce:df:39:9a:20:e1:9e:04:d9:
5d:ae:02:74:c8:fa:44:83:50:05:79:bc:74:db:63:40:c2:2a:
1e:bd:4e:df:b8:7d:10:e5:42:06:2e:f5:e3:3e:6f:e7:ae:d7:
2e:e8:9d:6e:05:2c:5c:db:10:3a:69:34:08:eb:8f:38:3f:29:
c2:65:3b:de:48:05:14:69:5e:bf:22:3c:b2:f8:2c:f5:1c:61:
94:81:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:34:08 2025 by rpki-client