Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cde34886-1ace-3a46-977d-618a537d3676.roa
File: cde34886-1ace-3a46-977d-618a537d3676.roa (raw, json)
Hash identifier: HQL8UBN2TBtnRZhK8qem6jFBvTxAT/eVwfeM/NmYlEk=
Subject key identifier: 18:3B:91:4D:B6:09:19:72:19:86:BA:0F:F0:21:79:88:C9:B1:D0:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D1798BE7C63F14CCDD300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cde34886-1ace-3a46-977d-618a537d3676.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33655
IP address blocks: 2001:559:4d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:17:98:be:7c:63:f1:4c:cd:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=36cfb08f-d16c-4765-bb4e-4af178e56cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:e3:ac:2b:64:72:55:f1:d9:2c:01:8d:c7:
77:5c:95:57:7d:54:3f:e0:ce:2d:e6:4d:86:02:64:
e3:8e:7f:45:ae:98:6c:fb:2b:29:f1:23:9d:d2:4c:
00:4d:38:cb:e6:6b:7d:75:d3:fb:8f:51:aa:0d:3b:
dd:af:c1:6b:ff:7b:ed:f5:36:b9:33:bc:19:05:a7:
40:fc:5e:81:7f:d8:32:36:fe:71:da:dd:51:99:45:
b9:fc:ef:3d:5d:76:74:fd:55:30:37:5e:08:35:0d:
4f:ae:3f:f5:c4:79:b2:8f:21:87:64:88:5a:09:4a:
66:78:dc:e6:ea:ea:a7:c1:0b:3b:a5:43:f9:d8:0b:
61:49:c9:4e:05:a4:2d:28:db:ed:86:51:24:f4:8a:
11:f6:fe:04:47:3b:69:e6:81:73:e2:d6:06:0e:0b:
7b:39:bf:63:fc:21:d0:c7:2c:ab:54:91:d3:4c:bd:
0d:40:f4:4d:e7:ec:38:3e:0e:08:bf:67:0e:61:7b:
f1:5b:20:80:dd:92:7a:55:e0:44:56:53:5a:30:7e:
01:b1:9a:1d:72:08:40:2d:87:9d:9e:5b:d4:07:c5:
a8:db:59:e9:5f:bd:cc:57:c4:47:e3:e8:04:90:a3:
aa:35:db:29:4e:2c:b2:37:f2:5e:c7:13:63:40:5b:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:91:4D:B6:09:19:72:19:86:BA:0F:F0:21:79:88:C9:B1:D0:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cde34886-1ace-3a46-977d-618a537d3676.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:4d8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2e:3e:8e:20:eb:86:09:e6:73:0b:1d:d5:29:0a:b8:37:55:
c8:4e:cc:79:f7:3e:2d:b0:a8:a3:87:c1:5d:b9:ae:f5:a6:f1:
c0:21:fe:9c:8e:fb:bc:64:8f:55:98:8f:bd:e2:4c:3b:84:06:
9b:75:64:d5:71:ca:ca:c8:d8:d0:1f:f5:83:33:d2:3f:2c:e0:
b2:8b:51:1a:26:68:bc:8b:05:e4:3c:b1:10:5e:b1:14:34:01:
69:c5:3a:37:a6:76:53:8f:0e:6e:c6:36:5f:e2:61:4c:17:71:
29:44:bc:c6:60:1e:d7:bf:0f:26:b9:69:11:f4:8e:61:ee:50:
e8:13:f3:0c:6c:94:7d:3c:3e:9a:84:cb:c3:93:6c:5c:86:6c:
45:7d:56:8c:b4:e0:f0:ef:d5:a6:13:e7:c7:31:53:0d:b4:da:
38:fc:f2:ee:fe:3c:18:0a:b7:bb:1e:ae:bc:c4:2b:5d:9c:af:
43:86:70:8e:6b:46:aa:4a:24:05:59:78:76:04:e1:0a:3f:f4:
73:7c:c4:ae:e4:48:df:16:13:cf:2a:38:b7:78:84:ce:93:80:
d7:18:96:c9:0e:46:90:07:2c:4c:b2:78:f8:33:52:3e:4a:45:
cb:31:cc:47:a6:70:1b:63:6a:00:25:14:ac:d7:1f:14:ef:df:
0c:20:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:01 2025 by rpki-client