Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4843efb9-c4a2-3a22-b092-7e2731d517d2.roa
File: 4843efb9-c4a2-3a22-b092-7e2731d517d2.roa (raw, json)
Hash identifier: Asqoi/nngV+Vki/B4GX2PEiK+Xft9+SlynpPQi/UzM0=
Subject key identifier: 56:5C:C3:CB:7E:F8:CF:79:3C:EF:DC:60:3D:67:9B:CA:74:AA:92:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CA20D43480AEBAB781800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4843efb9-c4a2-3a22-b092-7e2731d517d2.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 2001:559:557::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:a2:0d:43:48:0a:eb:ab:78:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=fe7c9594-cffd-40b0-ac82-6d6ab7d5fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:f1:a5:75:4e:1d:e8:ac:48:21:57:44:b2:
cc:99:e4:e8:d3:a1:af:f3:0f:48:68:30:d7:6b:60:
1c:55:00:45:43:42:dd:11:4d:78:b0:35:99:4b:77:
13:b5:fb:a7:db:5d:a1:08:b0:21:13:33:0b:fc:eb:
18:ad:95:0c:70:e3:f1:4d:71:ed:e5:9c:ad:3c:d5:
91:7a:f3:b4:ab:ba:eb:af:db:cf:14:bb:ce:b4:f7:
25:78:9a:78:65:6d:d3:fd:f4:cd:aa:1e:39:3e:b5:
f1:b5:c8:c6:69:b9:5c:43:b3:34:0f:ee:2d:16:a1:
b1:4b:fc:13:88:4d:02:92:37:ac:ad:85:7c:56:81:
3b:bf:c2:e1:c9:a1:ba:62:e5:0e:f7:58:e1:93:85:
ca:74:fc:1e:a4:95:63:61:92:81:72:aa:1c:c3:93:
7e:9f:20:85:77:b2:95:df:46:2f:f2:ce:7a:d3:2d:
9a:34:2c:3a:33:c6:a2:7e:41:e9:dd:a7:bd:06:c3:
23:13:df:58:e3:26:53:5b:19:2a:b2:6d:80:8d:41:
0a:07:41:0a:0c:26:a7:89:4c:db:b6:51:94:6f:3f:
0b:54:6a:82:b6:99:07:fd:6a:6c:7a:60:03:38:ec:
de:92:eb:a7:be:0a:7e:5e:d8:c6:66:ce:ff:c2:b8:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:C3:CB:7E:F8:CF:79:3C:EF:DC:60:3D:67:9B:CA:74:AA:92:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4843efb9-c4a2-3a22-b092-7e2731d517d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:557::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:65:04:40:97:0b:c0:ff:40:7d:87:fd:ec:d2:07:6c:8d:c9:
ff:35:99:f9:11:b3:35:80:ea:c2:8a:f0:3d:d6:b5:87:ab:0f:
7b:d6:2e:bf:fb:98:8f:60:80:e8:d1:1c:b7:3d:c0:72:17:d6:
c5:ba:5e:bf:29:dd:d8:69:b5:67:fc:a9:39:0c:8c:2a:2b:b7:
58:00:c9:a9:39:21:ce:aa:72:ea:f3:1a:dd:28:d3:f4:1a:d4:
e6:dd:12:9b:75:4a:47:03:60:22:af:d6:2c:ef:75:e7:99:46:
8d:6f:7f:c2:f1:2d:9b:96:7c:7a:08:d3:01:02:03:7f:78:82:
af:71:a6:8f:8f:d8:c3:02:26:b6:b2:54:38:10:92:4b:ff:a7:
a0:f3:79:1d:9d:1d:02:c9:5a:37:a9:d3:ca:12:8c:94:eb:ee:
c6:f3:34:6d:4f:db:26:7a:3d:38:08:68:56:15:20:fb:89:79:
5d:cc:9c:f6:c0:9b:9c:0c:bd:fa:35:07:0c:4c:2e:c4:be:81:
f0:46:55:6c:27:d0:b3:a9:c9:f1:73:1e:39:bb:a9:bc:97:1d:
96:02:26:0a:00:1d:f9:0b:70:1e:4b:8f:3b:99:f7:40:ba:65:
a4:9d:53:ef:c1:05:5a:4d:a9:24:8e:49:e9:ce:c3:67:ce:8e:
ed:c2:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:57 2025 by rpki-client