Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9a49f2d-f67d-3055-9eb2-bce08a5a9e2e.roa
File: d9a49f2d-f67d-3055-9eb2-bce08a5a9e2e.roa (raw, json)
Hash identifier: 7W3U1o2Pxr72h3n9XhV0BZJ/Dyy46d+qF9F+Nbb+cN0=
Subject key identifier: A6:A8:73:85:EA:DF:88:9D:FD:BE:8C:DA:84:29:9C:91:3D:FB:14:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DB3F71EF0103AE839D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9a49f2d-f67d-3055-9eb2-bce08a5a9e2e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 2001:559:c33c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:b3:f7:1e:f0:10:3a:e8:39:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=15c5cfd2-bcd4-4160-a72b-0c93a65751fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:ce:19:83:82:fd:7e:58:59:ce:bd:2f:f8:
e8:de:cb:c7:c9:06:d5:1e:ad:ba:49:b1:bf:b1:a1:
16:4d:b0:64:98:ca:65:ac:f1:ea:68:d3:2f:59:e2:
9b:6e:e5:f0:42:ee:74:b8:c3:f7:96:0b:a8:2c:e3:
69:70:b7:72:97:d4:c4:49:52:15:5b:0f:d4:06:26:
9e:fb:e8:51:67:d5:d3:6a:40:42:6f:a1:f1:be:c8:
5b:71:10:ba:43:dc:88:db:7d:9d:52:65:ff:ed:34:
47:ee:b1:c8:cf:3f:da:d1:da:64:da:bd:58:bf:10:
9a:43:7f:5c:c1:d3:82:af:a6:9d:5a:24:e5:1c:ba:
f9:19:56:a7:52:a6:02:ec:6c:22:f2:2a:9d:eb:b1:
e4:d2:fc:ef:54:0e:82:ae:c8:d0:be:04:44:51:14:
5f:d3:16:6b:13:e7:d2:57:65:9d:5c:50:65:47:02:
73:4a:20:76:53:c7:93:52:9b:b0:83:93:a6:6c:84:
44:8f:1a:09:5a:cc:7c:2e:e1:2c:64:68:66:1b:f8:
f8:98:18:64:af:ac:2b:2f:6a:44:e8:2e:e5:f9:41:
e8:d2:1e:2d:27:ea:d8:fb:e0:b1:ce:9d:86:7f:1e:
3d:df:06:13:06:69:01:88:65:b0:b8:05:ff:36:38:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A8:73:85:EA:DF:88:9D:FD:BE:8C:DA:84:29:9C:91:3D:FB:14:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9a49f2d-f67d-3055-9eb2-bce08a5a9e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c33c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a0:03:66:4b:f7:57:c7:25:46:cf:88:f5:ca:e7:ce:55:6d:
1d:c9:4f:1b:47:20:2d:fb:f4:d5:ee:fd:53:b6:24:f7:a6:9a:
6f:ef:21:3a:31:83:07:cf:ac:3b:59:46:f2:06:95:f2:8f:8a:
b9:2d:71:ff:c7:0d:22:3d:7d:14:d1:bd:85:9b:f9:e4:69:f6:
55:a6:10:2a:0d:c0:d4:9f:29:bf:55:8d:85:ef:2c:00:ab:d1:
e8:4f:8a:11:2b:f7:af:bd:8b:32:f5:c7:03:f3:33:4a:67:8a:
73:d6:b9:0f:33:1c:75:50:eb:8b:df:19:68:39:8a:41:16:51:
4e:6b:ff:d9:9e:e1:ff:2d:13:44:71:1b:ba:8b:fb:8d:dc:3d:
5e:53:ea:db:ca:9a:9b:ea:d9:f7:57:6d:88:21:98:3e:12:6f:
62:a9:e7:08:f5:21:ab:89:43:00:4b:95:83:a6:b3:56:b5:5a:
f1:ec:fd:5a:23:cb:9b:a8:ef:ba:fe:c2:39:6f:98:22:a1:8c:
0d:c6:6f:d4:94:37:65:c3:f9:87:ca:2f:8c:7b:15:e6:a5:d2:
a4:ca:fb:d8:79:13:3c:37:67:d6:ad:0e:c5:b2:37:9b:2f:35:
1a:a9:8f:a4:56:3d:de:f7:8d:be:93:f7:3f:7b:51:01:5b:e7:
93:78:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:09 2025 by rpki-client