Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c47859e-afd2-33a5-bf44-dfcfc8f93496.roa
File: 1c47859e-afd2-33a5-bf44-dfcfc8f93496.roa (raw, json)
Hash identifier: YVaE6UNfoZnhLBZwntIQB+w+snDqSKFTLzXUe8AnyGg=
Subject key identifier: 49:36:F1:24:9B:05:79:D3:26:B5:75:62:39:7E:35:39:46:00:5A:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584882809F8789F7841DD9097800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c47859e-afd2-33a5-bf44-dfcfc8f93496.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 33490
IP address blocks: 2001:559:b00c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9f:87:89:f7:84:1d:d9:09:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=be041fef-1007-421b-a5d8-1bf41b6bff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:dc:0c:70:0f:b5:39:95:43:4a:b3:30:30:
61:a4:63:67:f9:71:2b:fc:81:b3:d3:8f:1c:d5:95:
21:6a:51:3e:53:a2:57:91:7c:c3:f5:ce:d4:a3:7a:
6d:fb:9b:e8:35:b0:8d:4b:31:62:18:1b:8d:30:86:
b9:1b:6a:cc:da:e3:50:5e:33:08:e1:8f:59:ca:c8:
a6:1f:1b:31:89:42:7d:a9:a0:74:36:bf:c5:89:b7:
3f:4e:de:bd:40:71:df:0d:f0:83:a4:09:26:a1:20:
a6:a6:89:df:34:af:1e:78:7f:1b:f9:a7:5a:09:88:
33:5f:01:fb:29:8c:80:34:fb:81:32:1b:ee:52:37:
6b:03:cc:79:c6:4e:b6:d5:6d:3d:9b:a5:e5:51:a4:
21:9b:a6:35:fb:5f:ef:ea:bc:72:ea:13:08:ec:16:
36:20:3c:f1:7e:50:e3:b5:cf:8e:06:67:10:94:f6:
50:8c:4c:e1:08:5d:0b:e1:59:2b:a7:d2:27:08:df:
5a:2d:85:b9:dd:84:a2:27:89:aa:80:d3:af:7f:44:
ee:07:c8:c7:35:bf:65:04:89:a4:eb:b2:4b:29:82:
fa:c7:db:14:67:c6:a6:15:2d:87:50:98:da:2e:da:
16:df:e3:68:6d:db:ff:27:4d:cd:fe:bd:58:51:d3:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:F1:24:9B:05:79:D3:26:B5:75:62:39:7E:35:39:46:00:5A:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c47859e-afd2-33a5-bf44-dfcfc8f93496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:b00c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:13:0f:40:b4:12:f1:31:65:30:ff:64:a0:13:d5:4a:0b:c3:
e1:a6:74:bd:48:68:b9:ae:dc:c7:d1:a0:5d:79:b0:63:c2:b2:
5c:90:b2:61:65:13:22:19:3a:27:f3:81:2f:d2:a6:f7:23:ac:
30:b9:8c:2f:bc:ab:f0:95:59:8e:3e:b2:52:e8:62:39:bb:51:
de:66:42:27:d0:02:b0:82:73:8a:75:17:fe:aa:f2:92:9e:c8:
0d:a1:27:cc:f5:21:af:8e:86:4a:4b:da:bb:42:31:76:99:69:
48:7a:a5:fa:c7:9e:bc:e3:03:05:88:84:62:2d:5e:46:08:e8:
63:21:8d:cb:91:a9:ba:1f:09:08:5e:e8:55:88:20:f1:5f:1f:
44:2c:e0:1d:cc:d5:ca:ad:44:49:89:34:74:ca:29:f3:29:f8:
52:3d:18:7a:dd:77:b2:cf:3c:e6:41:bd:9a:4a:a3:ea:90:71:
d2:3b:1b:b9:d5:ca:8f:b3:46:1b:a2:c1:49:79:bf:d7:d1:a8:
cd:2a:c8:4c:3c:90:fd:4d:20:1b:4c:bf:c3:b9:02:84:97:3b:
9f:28:9c:91:4e:7b:c3:82:1d:50:27:42:42:70:08:83:8f:c4:
1c:aa:b5:a5:a6:6d:ee:ac:f3:db:82:77:3d:e1:e5:b5:20:42:
36:6a:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:51 2025 by rpki-client