Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7860fa4-d535-343a-ae8b-a3ddd9fd8b90.roa
File: e7860fa4-d535-343a-ae8b-a3ddd9fd8b90.roa (raw, json)
Hash identifier: E+rQHFxgAZK2RWPg3QMvCa2uE9TYv7X30xVdrPJGkrU=
Subject key identifier: A4:34:70:F6:C1:E1:88:0F:79:5E:FE:D6:0F:8A:55:89:00:6E:DB:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C38E36B5BFECB6B5A58C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7860fa4-d535-343a-ae8b-a3ddd9fd8b90.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 2001:559:8674::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:38:e3:6b:5b:fe:cb:6b:5a:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=06936875-33c1-4678-926f-372862f00409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:73:15:c8:9b:a0:c0:3c:5c:8b:41:dc:24:
5e:f4:48:a9:7f:8b:76:61:91:3c:f3:fd:ab:c8:34:
60:7d:92:12:98:86:b5:26:64:5b:e4:c5:64:63:67:
51:9a:d6:e1:e4:45:33:6e:be:01:c4:af:cb:69:96:
6b:c4:4c:89:77:86:cc:29:28:f7:a6:28:3e:f6:ca:
88:6a:bd:70:4f:7f:f9:d8:88:cc:0b:2f:c9:40:b5:
d9:62:ca:ae:fa:65:27:79:62:90:38:c6:24:36:87:
ca:25:01:4b:3f:05:55:a2:bd:3e:07:19:fe:09:1b:
3f:35:81:10:2d:2b:d6:57:da:f8:53:94:75:43:6e:
a1:87:02:3c:91:a3:36:65:b7:06:10:e9:58:80:2f:
4d:ef:db:22:12:8b:42:3b:dc:7f:37:91:e8:75:34:
6e:6d:76:65:de:d3:75:d6:d2:92:fb:39:48:55:71:
f7:f2:4b:6f:c1:16:a8:d4:94:f4:3f:9a:63:d2:ca:
c3:4e:c6:c9:b0:87:8c:f9:97:e1:0d:16:1c:61:40:
15:6a:e1:ff:e0:d2:e5:36:75:49:94:2c:0b:1a:1f:
04:e5:27:7d:29:b0:c2:4e:db:7b:d9:0c:78:68:4b:
df:5d:cf:d8:43:fa:d1:96:b7:39:32:a7:93:3f:d1:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:70:F6:C1:E1:88:0F:79:5E:FE:D6:0F:8A:55:89:00:6E:DB:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7860fa4-d535-343a-ae8b-a3ddd9fd8b90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8674::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:fa:2c:d8:1f:25:23:e5:a2:dd:c8:ad:8e:b2:c7:d4:8b:ea:
af:bb:70:1b:f5:39:0e:43:8b:65:3e:d7:33:0f:9d:fc:e9:4a:
da:9b:68:ed:03:3a:da:ef:7b:94:02:91:7b:d8:14:ee:d6:6a:
ca:a6:33:3b:ee:dd:be:8e:14:c5:2b:80:21:aa:61:7e:cd:30:
e2:ed:22:9f:d6:e1:91:ba:a1:e2:70:b4:5c:e0:1f:23:26:52:
68:62:35:c8:fe:e2:0e:f0:15:f5:95:8e:c2:23:a4:8d:ad:98:
7b:26:05:db:37:44:7d:37:d0:18:2c:5c:54:9f:de:f0:ec:ca:
19:35:c2:80:7a:97:29:36:e6:2a:01:6c:19:3b:04:e8:a5:a4:
43:af:b2:23:63:98:ba:64:79:b9:de:da:0a:2a:4c:5b:5c:37:
51:84:b8:82:83:c8:18:19:63:e1:94:b1:e0:03:0f:43:dd:37:
b1:16:dc:2a:44:52:b6:1e:9f:2b:c6:16:32:8c:28:a5:ae:5e:
0e:49:31:1f:6a:d4:82:82:52:51:31:ee:24:16:9e:e2:4c:dc:
7e:c9:dd:80:52:0f:f4:93:e7:b9:50:72:3f:2f:e7:7a:67:76:
c8:5c:f0:97:3b:51:2e:71:e9:a5:a2:0c:21:24:ba:27:2a:38:
f1:98:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:43 2025 by rpki-client