Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d494d25d-4a16-32ca-8a02-64b4368d2aa8.roa
File: d494d25d-4a16-32ca-8a02-64b4368d2aa8.roa (raw, json)
Hash identifier: purZJCnBcEwAcGuI394N/uQhlWbg1SuOpa/WwbcclMM=
Subject key identifier: 0D:2D:23:7C:0A:29:76:5D:0F:46:DF:D6:5D:9F:B6:F8:32:99:1D:26
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C8270C2CA771010A0C500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d494d25d-4a16-32ca-8a02-64b4368d2aa8.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 2001:559:59d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:82:70:c2:ca:77:10:10:a0:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=0cb3b1b3-798e-481d-b3bd-b1ede8f12c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:2d:a7:a3:25:d1:e5:d8:f4:16:1a:60:2e:
7c:17:5c:1d:0c:3a:f9:4f:5d:91:68:39:d5:de:0f:
30:ad:a5:1c:12:de:7d:84:46:a1:7a:d1:c9:81:c5:
2f:c7:8a:a2:26:17:90:23:44:0f:56:28:a7:e9:39:
1b:9d:18:5e:bd:e8:00:3b:f0:79:9b:0d:5d:62:c4:
79:9e:28:e4:e7:b0:a6:79:55:3b:7e:0b:40:01:d1:
73:1c:44:a9:10:f4:95:53:54:c7:0a:ba:8e:43:40:
ec:84:24:63:5e:30:09:97:f8:89:1d:22:19:57:bb:
e3:b8:83:65:ec:6e:19:18:26:4b:84:dd:90:99:66:
cd:4e:a0:69:65:93:d1:cf:ef:19:9c:29:ea:fc:72:
bf:22:85:d4:b5:85:1a:52:8f:56:ce:03:bd:a3:1f:
3d:07:93:3f:7d:36:5e:dc:71:b1:1d:71:29:70:65:
31:6c:5f:fd:55:4d:8c:bf:ec:b7:9f:a4:3c:60:fa:
41:85:46:39:23:03:21:7b:ba:33:00:8c:48:09:6d:
2c:22:17:bc:c4:f8:01:59:90:df:95:15:db:f8:42:
91:42:55:6d:70:c7:f5:a8:47:26:8e:85:e2:9a:54:
93:df:5b:f1:38:d1:70:18:f7:93:7c:53:a3:02:bb:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:23:7C:0A:29:76:5D:0F:46:DF:D6:5D:9F:B6:F8:32:99:1D:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d494d25d-4a16-32ca-8a02-64b4368d2aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:59d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d3:e4:d5:a7:4c:df:de:10:1d:92:9d:44:c1:70:12:f2:9c:
f5:e9:88:28:d9:1f:e2:95:5c:2f:74:c9:f7:61:44:d3:25:6f:
d2:e4:90:98:d0:e6:2a:8d:fb:35:f4:bf:92:ae:ba:4c:20:a8:
ae:67:49:5d:4e:c7:11:dc:c7:e6:1e:95:13:f4:40:91:60:92:
0b:dd:b3:e3:75:bf:4f:51:ce:2f:41:31:8a:ec:d8:6c:7b:54:
db:89:03:8c:a5:d1:1a:80:c2:06:4c:e6:8a:4a:46:71:4f:2a:
d1:b8:80:31:72:6f:a8:60:e0:f4:37:c4:57:56:28:e2:d0:cf:
b0:58:d8:bf:b1:39:34:fe:93:2f:37:d4:0e:28:d2:4c:b3:9e:
60:0e:2f:a5:29:4b:f9:33:b5:df:31:f1:18:ed:b7:bb:80:0e:
2b:01:ee:00:30:24:1b:db:95:d6:5d:19:f0:39:01:bf:2f:ad:
29:ef:0d:29:74:75:32:12:c2:ff:84:c9:c6:45:ef:d1:a9:82:
d6:94:72:67:4f:56:97:67:7b:f9:01:d5:b9:c5:92:17:51:5b:
13:30:fe:92:e2:57:5c:e9:f8:10:48:61:22:fd:25:74:3e:25:
36:bd:d4:46:1a:5d:82:1e:b7:6c:1e:9c:f1:15:86:ef:dd:32:
fa:17:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:36 2025 by rpki-client