Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37691f2f-b834-31e0-b703-2812ca4122ae.roa
File: 37691f2f-b834-31e0-b703-2812ca4122ae.roa (raw, json)
Hash identifier: DYrjzTEKLkGWRJPdU4XoxrBC5TZxkQZbAshWJWZpOIk=
Subject key identifier: C3:B3:00:77:0B:76:94:E3:51:F6:E1:8C:3E:75:78:7C:CB:51:04:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C9EDB3993AAE438BAAC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37691f2f-b834-31e0-b703-2812ca4122ae.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 2001:559:2f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:9e:db:39:93:aa:e4:38:ba:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=63f0006c-fadc-4c7d-bd5d-0dc743c7ed2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:19:fa:47:91:54:57:86:69:20:de:6b:21:
2b:5c:8a:c1:15:f6:e2:85:f1:74:cd:9c:37:c8:85:
fe:04:f5:d2:53:9b:ed:de:45:2c:24:3f:79:56:b3:
ce:ee:da:36:0e:6b:d0:3a:da:9c:dd:37:0f:f8:dd:
8b:ec:98:36:20:61:97:da:0b:c8:23:21:41:b6:ee:
54:8b:03:6b:05:1e:93:e7:f8:ef:c9:86:ac:c1:48:
40:b8:fb:b4:ea:1e:4c:d5:18:ee:a9:81:cc:19:49:
1f:23:78:b6:ca:01:12:74:30:88:34:2b:b6:37:0d:
bd:68:a1:48:33:eb:5e:a5:d8:a3:11:2f:d9:58:3a:
a7:23:8b:59:1a:e6:66:a6:3d:2e:ca:c3:48:46:83:
01:92:d6:57:e6:d9:ed:c8:25:33:41:ff:6e:de:60:
36:5a:f0:a9:cb:74:82:8a:ea:45:91:9c:59:31:7c:
b6:d4:1c:eb:dd:4b:b6:03:77:91:c8:36:6e:56:19:
89:c4:df:ea:2a:0c:66:96:43:41:0b:fe:15:73:fa:
cf:53:c4:f2:ef:8a:19:5e:cb:4f:9e:3f:3b:82:2c:
61:4b:84:c9:84:32:b2:3a:7c:19:93:b1:e7:2a:6a:
10:34:e3:86:3b:f2:03:8a:83:d4:18:fc:4e:bf:d8:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:00:77:0B:76:94:E3:51:F6:E1:8C:3E:75:78:7C:CB:51:04:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37691f2f-b834-31e0-b703-2812ca4122ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:2f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:10:5e:eb:b8:32:43:6a:ac:e1:fe:86:1e:12:c4:2d:38:34:
00:b4:69:7d:5d:e9:9e:0c:7c:be:96:61:ee:68:9c:fb:79:a8:
60:33:cf:dd:cb:b9:25:e8:84:a6:84:8d:71:ab:71:5e:de:67:
b8:f0:c7:8c:26:59:53:23:04:af:ac:a6:8d:be:cb:31:d6:27:
87:07:32:7b:74:6c:a1:08:b2:e6:38:9e:40:58:f6:1e:40:7e:
7c:60:f6:a3:4a:08:eb:77:07:16:6c:f8:06:25:9b:3a:36:68:
5f:6d:43:9a:a8:8a:ac:ff:54:b2:76:10:58:e6:d3:5b:61:c2:
fe:e5:2f:89:89:39:ef:2a:e8:a2:11:7d:f9:f2:48:53:e2:6d:
04:e5:1f:ca:9e:73:a1:2d:2d:bd:d3:d4:b6:76:a5:24:6c:2b:
4b:e8:2b:d3:ad:93:b1:d2:77:97:64:3a:d4:11:1d:97:09:e2:
24:9c:a6:74:68:57:59:93:9f:5a:93:08:70:99:30:2e:cd:5c:
c6:2a:2a:0b:c2:fa:10:f9:56:9d:40:36:c1:4a:0a:d6:12:c6:
e0:36:12:6a:aa:e9:0a:fd:e4:9a:04:40:b7:b5:d6:35:24:2a:
85:76:1c:f2:0a:e7:55:9a:ec:49:bf:9b:8c:37:25:9c:4e:94:
d4:25:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:16 2025 by rpki-client