Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2203ca-67f9-3b32-917b-e05c0512eced.roa
File: 5b2203ca-67f9-3b32-917b-e05c0512eced.roa (raw, json)
Hash identifier: 9/1oIqniMFcYDEKRuLl6QZQmnOaqY7tAmhi3qugtV+0=
Subject key identifier: DF:1C:85:E6:A3:8C:28:68:E1:AA:7F:DB:27:B0:98:0D:3F:FE:F1:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BBE3FA388051781A7E640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2203ca-67f9-3b32-917b-e05c0512eced.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7016
IP address blocks: 2001:559:8749::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:be:3f:a3:88:05:17:81:a7:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9143f649-bc7b-4e87-8d1f-b757ea18f751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:46:9c:a7:4f:ef:a7:89:f5:96:9b:c6:4f:
f2:79:4f:53:0c:6e:e1:2e:29:1d:69:47:4e:6f:93:
42:ff:bf:35:4e:14:44:b2:e4:2c:f2:04:3a:0a:44:
fc:bc:94:50:c5:46:06:7f:4f:16:d3:e4:e4:b7:c4:
42:d6:ba:4c:56:d2:f2:77:55:97:a6:87:b3:2f:07:
da:ee:00:30:2c:43:78:79:94:c7:fb:4c:43:44:8a:
77:d6:34:21:52:d7:ee:0e:9c:06:01:dc:1c:18:15:
ae:81:13:31:66:55:0c:83:f9:3d:ce:e1:66:c4:03:
a9:42:ae:ff:cc:15:60:24:92:46:5f:7e:8e:47:38:
0d:85:02:e0:29:dc:70:32:b0:11:c0:95:c0:e1:7d:
17:7b:6e:c2:3c:e0:02:11:fb:f1:5f:e7:90:84:f3:
b1:53:5e:31:35:5c:59:a2:7f:6f:b2:0d:71:12:29:
6c:0c:9f:e3:f0:16:64:80:ae:79:b8:94:98:74:1e:
f1:6f:3d:c8:83:2c:98:5c:a0:a4:bd:b0:f8:cb:e7:
7a:76:a8:4e:c1:93:a7:16:06:d6:b4:95:80:2c:3f:
b0:20:a7:f5:34:26:14:c3:c2:40:dc:4d:08:a1:3c:
d4:5d:77:09:54:05:9b:27:c2:8d:da:de:34:df:2a:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:85:E6:A3:8C:28:68:E1:AA:7F:DB:27:B0:98:0D:3F:FE:F1:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2203ca-67f9-3b32-917b-e05c0512eced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8749::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:8a:92:37:b0:22:8f:8a:11:fa:41:2c:4b:28:f1:57:7c:86:
0d:13:32:fc:64:6a:58:3d:83:16:38:ac:44:aa:77:da:0d:48:
c9:9c:12:87:a7:18:ec:2c:b4:c5:b0:7f:30:81:1b:f4:5f:0f:
c2:25:75:8e:d6:ad:58:14:38:dc:c8:b4:0c:8f:6b:f6:8f:73:
d6:35:32:52:88:87:8a:e2:c9:94:95:8a:f8:f1:f7:12:76:55:
a9:3e:29:f8:69:f2:49:38:bb:f1:2b:77:22:ff:19:d2:39:94:
6c:42:97:0d:a2:75:48:00:51:98:30:d8:7b:08:cc:3c:ac:e5:
0f:96:ec:e4:09:a2:d1:6a:ea:f6:b1:17:af:c5:6c:fe:ee:6e:
56:84:b8:4d:85:42:ec:d7:b2:ea:c1:aa:26:55:95:1a:4b:76:
10:b9:a9:43:20:f7:a3:f6:c0:20:24:09:5d:3b:8c:4a:08:df:
f6:22:38:b3:a1:d3:1b:e4:8d:f9:d5:7e:bc:fe:ad:21:70:fb:
e0:4e:1d:f2:42:b9:b2:38:6c:ba:bb:42:b9:a3:05:14:d0:3c:
11:24:14:44:33:82:99:b7:6c:33:b6:7b:a0:68:73:1e:a3:e4:
1e:86:8b:cd:e1:6e:f2:bd:bb:9b:d8:11:c6:c5:21:de:94:cb:
f5:78:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:07 2025 by rpki-client