Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a52ccfd-45c2-381e-b2b1-c7d40e7cf616.roa
File: 4a52ccfd-45c2-381e-b2b1-c7d40e7cf616.roa (raw, json)
Hash identifier: MwGsq9oSa+4FItMgCvZ8HCG5RZjeog0FxbTD2u/63W0=
Subject key identifier: 1C:21:0F:E5:9F:21:EA:22:08:74:2C:5B:98:17:25:56:9F:C8:74:57
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D3F5F9354DFDB2C11C800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a52ccfd-45c2-381e-b2b1-c7d40e7cf616.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 2001:559:418::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:3f:5f:93:54:df:db:2c:11:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=b1e229cc-eeac-484c-88f5-03f0d982602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:77:74:95:d3:73:a6:65:29:22:93:5f:68:
5f:39:65:54:7b:8b:56:1d:42:33:ae:db:20:54:95:
69:6f:95:86:fa:71:0f:8f:58:56:7a:5e:25:bf:ba:
df:80:5e:ae:aa:0e:ea:45:b4:3d:fe:94:14:68:65:
59:82:93:5a:90:2b:f3:e4:4c:db:4c:63:f6:25:8b:
17:b1:44:7e:7b:2c:cb:10:0e:a4:40:39:28:be:6f:
2b:7d:f6:dc:10:b7:84:07:3f:9b:37:1d:2b:26:1f:
1b:61:5f:6e:a5:5f:29:a5:2d:c3:98:d6:d7:b9:45:
fb:87:ad:c5:da:06:c0:95:40:4f:38:d3:ac:d6:e6:
a3:c3:34:57:9e:0c:3a:87:8b:1c:66:18:8a:fa:fb:
78:58:f1:9a:96:96:2e:aa:31:47:20:c7:c5:69:fa:
4a:04:b5:5d:a0:ae:6f:54:05:ef:d6:91:57:a3:36:
7c:0c:ac:19:c6:3b:6b:34:6f:38:d1:8a:fa:5c:e8:
1c:40:77:3a:ed:f2:b0:06:dc:f8:71:32:f5:12:37:
1b:a2:7b:e6:1e:5f:c2:d0:87:3e:72:20:6c:a5:b8:
16:43:86:82:f8:71:55:ba:4a:46:f2:b5:4b:5c:85:
26:9f:7f:23:1b:7f:be:3e:58:a5:fe:7f:b4:dc:d8:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:0F:E5:9F:21:EA:22:08:74:2C:5B:98:17:25:56:9F:C8:74:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a52ccfd-45c2-381e-b2b1-c7d40e7cf616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:418::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:52:41:cf:cc:f9:dc:38:43:e5:8d:ec:55:2e:2e:29:d0:8d:
c3:b3:1c:9b:8e:c8:8b:94:f9:86:9e:b9:92:94:21:07:7d:51:
a2:fd:33:ce:53:7f:e5:86:66:9e:e4:83:98:c7:dd:09:3c:19:
b9:57:1d:4d:0b:94:b6:82:c3:d0:2e:97:6a:86:d6:d0:1a:cc:
55:ea:8a:59:63:f8:ae:78:28:c1:c5:16:d1:65:8c:03:27:4d:
90:db:2e:4c:f4:8b:f1:06:07:b7:a2:99:50:30:88:22:6b:67:
79:07:f1:91:21:ea:66:65:30:6c:8f:4b:1f:3d:5d:3e:e8:c8:
39:38:b3:27:d5:72:08:30:d8:30:de:b4:ec:be:9e:62:33:f1:
da:74:90:e5:8e:5a:f6:dc:a0:7a:12:1f:67:76:e4:49:e5:ce:
c4:45:ac:08:0d:fc:26:8c:30:51:81:0b:f9:ee:dd:d1:d1:6e:
35:24:a7:1e:c5:cc:df:cf:d9:e9:1a:14:74:2f:b1:e8:66:d3:
6d:68:80:4a:5c:0b:77:29:5b:2a:9e:e9:1f:c3:c1:f7:7f:b9:
71:a0:dc:ec:15:f6:0b:62:84:53:cc:c8:f3:ff:b3:a7:50:4b:
7b:fc:33:03:84:21:27:22:23:25:16:ac:b4:2f:8b:8d:70:b4:
de:13:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:42 2025 by rpki-client