Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ae9bb86-3c1e-35b0-be84-f25f75f36ed3.roa
File: 0ae9bb86-3c1e-35b0-be84-f25f75f36ed3.roa (raw, json)
Hash identifier: 2jfpjj8qDhL7idzsjXX25UBSYWpkOia5GBFwVcZdY0I=
Subject key identifier: 23:81:8E:71:03:21:66:0F:A6:56:85:4D:23:6A:BE:1D:24:C5:D5:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E0BC786036C1ECA5B2A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ae9bb86-3c1e-35b0-be84-f25f75f36ed3.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 2001:559:8162::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:0b:c7:86:03:6c:1e:ca:5b:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2ab15ef3-60cf-40ab-979d-484eabd483c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:9a:bb:ee:c0:29:fd:44:07:c4:5e:6b:79:
c6:9d:fb:e8:2f:52:4e:c5:51:ce:51:bf:e3:d6:e6:
bc:f6:c5:0c:01:3a:a1:df:b4:d5:2b:6d:d9:cf:d8:
c9:4c:b8:14:84:c3:89:2a:af:2e:9b:bc:d8:03:25:
38:b9:4f:c2:11:fd:fc:a6:cb:3c:0e:13:ff:cc:b3:
54:6b:48:36:ab:67:9b:03:1e:dd:8d:05:46:17:40:
74:0b:6c:eb:eb:77:16:b2:a2:e3:3c:1d:45:0f:b3:
f7:d4:d0:bf:4d:ae:7a:29:eb:f2:a9:ad:38:de:d9:
0b:a9:93:2b:d2:97:6a:86:37:10:8a:12:8d:60:5b:
89:a5:d8:d5:02:00:f6:c3:79:3b:d7:7f:16:4a:2d:
00:8a:ac:67:eb:cf:e3:27:cd:b3:e3:a3:3d:b8:ad:
7a:b0:78:67:d0:bb:0f:9f:16:8d:33:70:8d:0c:55:
66:17:4a:83:ea:6a:29:0b:2c:eb:df:4a:44:05:84:
37:3f:55:3f:53:19:7b:33:45:07:ee:0d:59:7c:39:
63:c9:f5:ad:01:a5:51:31:cf:11:40:e4:c9:fd:0a:
06:4b:15:5b:95:d9:0c:62:4f:46:f6:64:e5:c3:56:
30:26:02:f7:b4:46:20:91:6e:0b:6e:eb:f0:fb:4b:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:8E:71:03:21:66:0F:A6:56:85:4D:23:6A:BE:1D:24:C5:D5:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ae9bb86-3c1e-35b0-be84-f25f75f36ed3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8162::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:8e:f5:a6:8b:8e:c1:da:5d:35:c2:62:0b:4e:55:26:d7:d0:
1f:e7:03:87:26:9b:b1:a9:69:83:1c:0d:62:21:6a:b3:7a:51:
bc:5a:10:ee:47:fc:bd:05:d7:24:75:a0:29:3a:dc:fe:9c:6d:
2c:75:a0:3e:b7:4d:d9:42:c9:28:bd:3e:8d:62:91:f3:06:3d:
88:1b:6a:67:9f:3d:3d:2f:d3:94:9a:2a:c0:66:02:f7:45:29:
cb:d0:c9:50:e1:d5:6c:0e:cd:99:20:84:91:be:ff:28:bb:f5:
00:91:50:8c:51:8a:4e:9d:07:83:cf:80:ac:48:09:0a:1d:4d:
6a:46:20:0e:ba:94:5e:35:11:6d:14:5d:21:af:25:4e:98:41:
e6:c0:8b:54:fc:98:a5:34:b8:2c:34:a7:60:1e:ca:c9:ea:a9:
30:82:f5:0e:eb:fd:fe:37:01:71:32:4e:5c:14:9e:ef:1e:b1:
a1:2f:5f:fd:30:95:21:38:45:db:43:4e:81:d6:1c:aa:b6:d9:
e2:17:b6:f4:d1:43:d7:44:ac:4f:e4:19:ec:dd:14:ea:49:2a:
50:b0:53:7c:5d:ca:69:ab:8a:71:b3:1e:d4:58:29:4c:b0:6b:
af:2f:68:46:90:25:88:39:43:53:e1:fe:84:c4:57:c8:f9:d2:
47:27:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:00:36 2025 by rpki-client