Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06b298eb-4c57-32d3-be8c-6f9674c15a69.roa
File: 06b298eb-4c57-32d3-be8c-6f9674c15a69.roa (raw, json)
Hash identifier: p79W9HZ48NW2/1Z5I9T6pqDnHPBWnfM6t2BUxyBmz3w=
Subject key identifier: B0:FF:E4:39:9C:B8:6C:E4:7D:CA:05:BF:20:7D:9B:AB:40:B7:41:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C20DBAB980D5DEE061D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06b298eb-4c57-32d3-be8c-6f9674c15a69.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33667
IP address blocks: 2001:559:2bf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:20:db:ab:98:0d:5d:ee:06:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=fbb9422a-7258-4266-be80-169141174793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:46:c2:8a:ad:1f:6b:d8:36:79:ed:8b:ce:
59:55:17:49:ff:0b:5a:59:ff:fe:20:ae:fa:26:10:
29:0a:8a:b4:68:cb:b8:2d:4f:08:05:ef:85:26:98:
2c:d8:25:29:02:bc:ff:cd:9a:fa:ef:e4:74:84:e4:
59:42:34:a8:8d:e6:09:a5:85:7e:00:9d:6b:39:15:
9a:f2:9d:a4:3d:27:19:d3:e4:88:00:04:d4:91:15:
7a:71:ad:c7:3f:ea:11:14:60:75:63:d8:1e:e9:42:
c2:c7:e4:bf:61:57:05:f2:2b:d4:c2:ea:30:90:8a:
e2:b5:cb:90:1d:06:69:c2:de:14:86:16:50:3b:5d:
ae:3b:02:fe:6b:cd:12:04:e1:27:cf:33:9e:e2:79:
49:22:04:06:8d:ba:4a:96:9b:23:27:f8:7b:28:6d:
5b:db:82:c1:af:33:97:70:3b:76:f2:e0:c7:2d:c6:
3b:94:74:b5:30:cc:b4:55:a9:39:06:ec:29:88:fa:
bc:0e:aa:16:57:7a:94:e0:72:3e:26:7d:eb:0f:22:
a9:c6:d8:08:46:43:8f:7b:83:f2:ca:b0:d4:ec:5c:
57:f3:9c:42:10:40:ff:56:77:a6:69:d5:b5:79:23:
dc:ba:78:f8:de:27:22:7b:00:67:eb:90:a4:1c:52:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:E4:39:9C:B8:6C:E4:7D:CA:05:BF:20:7D:9B:AB:40:B7:41:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06b298eb-4c57-32d3-be8c-6f9674c15a69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:2bf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:e7:94:f5:14:89:a2:c0:37:9f:18:8b:91:f5:7b:28:a0:ef:
59:95:61:8d:da:f9:81:ba:f1:34:60:1c:b5:30:2f:36:db:bc:
2c:67:cc:e8:a4:16:c7:00:02:5f:cd:ab:f0:bb:7c:ff:57:80:
38:bc:b6:e5:da:46:cf:e1:f5:06:b0:98:8e:ad:d0:20:8c:21:
b9:e1:5a:13:dd:30:b3:c2:5d:8b:13:fb:ea:b4:a7:f1:e9:24:
f4:e4:31:e0:44:a9:fa:5d:7c:f6:d0:1a:61:22:79:03:68:c7:
eb:6c:1a:61:17:30:c2:da:1a:5b:35:23:de:b6:c2:a7:b1:0a:
60:96:0b:44:77:f9:9b:1a:d6:69:1e:9b:51:70:f8:b5:f0:05:
ec:fd:52:50:ec:a0:a8:e2:7f:cb:1e:77:4e:43:15:e8:c5:09:
d5:27:bd:53:ec:74:ba:06:da:94:04:22:3a:e2:fe:74:74:93:
d6:91:5a:03:3f:30:dc:3f:b3:89:94:8a:fa:d8:81:43:bc:43:
a4:5a:d4:84:ed:d2:49:ba:ae:99:c1:9c:81:3c:a1:44:36:d0:
69:fb:fc:59:d4:3c:da:4c:c3:ae:a5:16:3b:61:00:8d:62:de:
52:b3:74:75:ca:fd:fa:d7:17:0d:2f:14:a0:e5:9b:5a:32:c2:
13:9d:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:21:37 2025 by rpki-client