Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1cb612-b266-3024-8ac6-b880135cfe5b.roa
File: da1cb612-b266-3024-8ac6-b880135cfe5b.roa (raw, json)
Hash identifier: rmocliyBKUJYSgi0ld4tPZqXJ2dj6LzWixQox+u3SKc=
Subject key identifier: 8B:E3:A7:8F:BF:9B:21:83:A7:06:C0:43:CE:AF:01:F4:9A:20:A6:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E1CBB039645256C09F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1cb612-b266-3024-8ac6-b880135cfe5b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33657
IP address blocks: 2001:559:841d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:1c:bb:03:96:45:25:6c:09:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ab8df6c2-132d-4d78-87d8-8354156874c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:d8:8d:49:26:29:2e:64:ff:d5:dd:11:19:
82:77:c2:6b:29:ab:0e:63:16:a3:36:3c:85:70:d8:
5d:cf:c3:ad:dc:98:fb:b2:f4:bf:36:83:84:44:c2:
7d:9f:ee:7f:7d:ae:e3:34:1b:46:b0:84:ec:a5:1d:
92:87:fa:0b:67:20:a4:41:e7:b0:18:77:0d:3c:5c:
30:02:6a:97:dc:1b:a2:ef:c4:30:57:d1:08:d4:44:
52:65:48:8a:bf:5e:36:b0:be:f0:8a:1e:ac:e6:96:
29:f2:5a:54:21:c9:cc:67:15:32:79:f2:60:b9:93:
78:d5:ab:23:3d:72:6b:ad:e7:99:4a:91:c7:c6:29:
46:02:bd:7a:a3:6a:4f:24:59:88:92:49:b6:95:d0:
06:38:d4:8a:00:a3:13:66:6d:e4:46:d3:18:fc:9a:
ac:e6:1b:c9:f7:11:03:b0:38:c1:0e:5e:77:6a:ed:
39:90:8a:a0:3b:43:3e:9f:e0:6a:ce:79:c7:cc:aa:
87:cf:9d:66:68:21:36:90:cc:76:11:fe:b1:9c:ce:
1a:c9:0e:86:ed:ea:3c:7d:3b:9c:1a:fd:55:0a:0e:
9c:93:73:d0:2f:fa:39:7d:93:e7:b1:04:18:f2:79:
98:01:6c:9f:d3:94:cb:ce:6e:4c:4f:17:a7:15:96:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:A7:8F:BF:9B:21:83:A7:06:C0:43:CE:AF:01:F4:9A:20:A6:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1cb612-b266-3024-8ac6-b880135cfe5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:841d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:f3:fa:be:b8:ea:b9:3e:87:ad:66:d9:ec:66:25:eb:df:6e:
1a:d1:f1:c6:fe:59:05:1e:fd:90:aa:2a:46:66:a8:75:13:7f:
d9:2f:40:f1:61:d1:4a:4f:99:0b:ca:78:5e:26:60:ca:ab:a5:
4c:ae:e0:fb:f6:36:84:b5:52:de:aa:5e:a4:02:29:6d:56:e0:
67:fa:4c:d6:b5:cb:33:65:fc:67:dc:61:49:13:ec:a5:2a:ea:
6e:a9:a4:52:d5:9e:ff:c7:1f:3a:38:fe:a3:cf:7c:b9:b8:0d:
9d:67:ec:11:f4:de:f6:d7:72:d9:2b:8a:b1:41:7b:e2:27:9e:
9d:9f:91:3b:ff:aa:1c:cb:db:4a:a0:68:40:05:9c:8d:18:22:
fb:7d:8d:6f:21:8d:d4:1a:21:d7:55:8b:2c:5b:25:77:b9:67:
de:ac:a1:d2:e5:4a:ac:ee:9e:51:fb:87:0a:46:45:f7:bb:aa:
d2:0a:9a:61:4b:30:bf:d6:7c:46:5f:75:fb:72:14:06:e7:68:
1d:1c:46:84:6a:4f:65:1a:cc:d1:c6:a7:aa:36:d3:f8:20:c3:
92:79:26:f2:7d:29:ec:34:e0:43:f9:93:c1:22:50:cb:46:c1:
36:60:ad:72:3b:a5:66:8d:9c:4a:ba:78:d1:fc:70:ef:7d:a6:
e9:68:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:06 2025 by rpki-client