Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52269b2f-793b-37f6-a6fe-f8b8004a2387.roa
File: 52269b2f-793b-37f6-a6fe-f8b8004a2387.roa (raw, json)
Hash identifier: vJhkL7Kb78MQMOC7jzgGgGdU23FkcFA3j0rMqmuMiHo=
Subject key identifier: E1:95:76:AC:59:49:3B:1F:85:91:F8:F0:80:60:6B:09:93:8B:05:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D7E6EC452A8D50CF1358F
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52269b2f-793b-37f6-a6fe-f8b8004a2387.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33652
IP address blocks: 2001:559:8539::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:7e:6e:c4:52:a8:d5:0c:f1:35:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=90b251d9-d8ae-430a-a89e-abfe758f36aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:9f:59:ad:d5:dc:d4:ce:68:7e:e7:96:83:
5c:fe:b0:e0:fd:d7:da:40:e5:31:38:e1:b7:9b:e1:
72:6f:3c:ce:e2:b0:df:69:dd:67:38:9c:81:a5:a6:
0e:59:fa:f1:21:1e:74:11:89:06:3b:a8:3f:e8:fc:
53:f4:1b:57:38:c2:37:7f:f2:ef:58:a5:07:81:8f:
d8:ee:92:d8:da:e7:50:83:66:c0:a2:29:fc:46:cb:
a2:55:d6:7a:ef:eb:95:a6:b7:4f:9e:e6:cf:f3:07:
a1:ca:f4:22:ec:18:1e:e1:04:a4:d0:ab:85:90:02:
23:4a:ed:db:28:eb:50:b3:a5:10:dd:17:8e:68:19:
be:44:85:89:57:34:8e:c6:65:5e:1c:6b:7c:56:b6:
d8:af:9c:82:69:44:be:c8:61:20:19:4c:6e:65:79:
ca:b2:0f:aa:43:c9:45:e7:26:50:5c:10:d4:4c:f1:
01:a5:d4:ee:b4:ab:b7:47:94:18:70:30:0d:7c:c5:
b7:16:b1:76:e2:83:9d:98:2b:c2:78:f8:3c:92:4b:
c1:c7:8c:ac:9c:1a:70:08:06:38:c3:ba:af:15:e6:
95:c1:38:9d:33:b4:fb:43:a5:40:d0:a7:d4:6d:97:
87:76:49:06:d8:6f:de:78:be:0b:b4:1a:bd:a8:79:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:76:AC:59:49:3B:1F:85:91:F8:F0:80:60:6B:09:93:8B:05:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52269b2f-793b-37f6-a6fe-f8b8004a2387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8539::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:38:a9:ab:da:7e:1e:ac:0d:ce:e5:e6:67:57:b0:c3:4c:f6:
52:38:e2:e0:34:32:c8:01:d7:4d:33:88:3b:c9:77:77:07:93:
af:46:fa:e0:57:32:be:8c:7f:c6:47:73:3e:52:fd:f5:85:81:
ac:3b:ef:8b:b2:87:ec:31:a8:ca:38:65:10:27:80:78:23:3f:
78:d6:79:8e:e4:6b:c0:0f:a4:74:92:93:76:3b:4f:8e:24:37:
7e:8b:24:30:83:d8:64:3b:b1:4f:fb:0d:f3:d7:a9:b1:00:90:
33:8b:db:33:83:b3:2b:b3:3f:a6:6b:b3:22:a0:fb:02:f2:02:
92:d8:6c:2b:61:3e:aa:2f:39:f4:e4:91:85:b8:b0:e6:3b:86:
95:8b:f4:1c:1f:a4:44:44:cb:41:ea:cf:f5:73:5b:c3:2c:89:
a9:02:ad:13:47:2d:d2:b4:33:60:ad:a8:ff:98:ec:fd:7c:4a:
99:ca:a3:ce:8f:a9:a4:bf:04:c3:71:20:99:77:dc:f9:b6:57:
f5:5c:56:1e:06:07:d2:fb:37:68:a5:03:e8:9f:55:e3:2a:cd:
61:33:54:e0:cd:ff:cf:02:21:04:74:c7:3f:b0:53:82:fe:dc:
31:21:fd:69:24:6c:8f:f7:92:7b:7d:f1:f8:e8:44:eb:5a:1c:
2d:ba:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:55 2025 by rpki-client