Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c62e41f-fb5f-3d16-9875-a9837b2675e8.roa
File: 5c62e41f-fb5f-3d16-9875-a9837b2675e8.roa (raw, json)
Hash identifier: 1P2okwt0xsf8rqT13jme/v0okiv5Con5ur9X5JVLR3A=
Subject key identifier: A4:63:06:70:44:DC:68:79:6E:67:5E:FF:D6:96:FF:D4:27:22:E1:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D84AC598A53792740F0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c62e41f-fb5f-3d16-9875-a9837b2675e8.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33660
IP address blocks: 2001:559:8460::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:84:ac:59:8a:53:79:27:40:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7768fde6-3535-4281-9d25-471c0f023a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:4a:7d:9f:9b:6a:38:2a:7e:9e:ac:04:d5:
81:08:e6:f9:ed:7b:ef:61:f6:6a:53:b2:98:d5:e3:
85:ef:34:24:31:0a:4c:77:d9:ca:73:58:6d:ff:82:
a1:cb:b3:ab:ec:ee:f3:93:9c:80:d0:5c:26:7e:42:
08:92:0e:2b:06:2b:39:bd:60:53:95:f1:d4:f7:e4:
44:ae:df:47:66:c1:bc:06:56:02:e5:8c:24:81:c6:
ac:87:36:2c:6c:33:13:3f:45:a9:32:cc:79:e5:db:
50:83:32:1e:5c:47:8b:0e:84:ca:fe:89:1c:c1:2c:
8b:07:07:b3:53:f0:5a:c9:b8:34:69:69:64:13:85:
e6:c2:b7:3b:1c:13:98:b4:62:92:f8:a0:9c:9f:d6:
0a:59:20:3e:ec:a2:af:e6:89:17:d3:55:65:26:ed:
66:da:30:89:8b:12:74:78:25:20:c0:dc:4f:4c:41:
b6:e2:f2:e7:43:fa:48:5d:6e:be:c4:3e:2c:8d:fd:
8c:90:94:c1:9b:55:c2:fd:97:95:91:87:99:01:33:
21:a9:f0:3c:53:dc:c4:08:86:20:42:1c:9e:06:73:
55:f7:a2:ae:9a:25:24:30:00:e2:5c:14:9c:9f:06:
85:1c:fe:d5:e7:bb:a2:cf:b4:f9:4a:c2:db:12:88:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:06:70:44:DC:68:79:6E:67:5E:FF:D6:96:FF:D4:27:22:E1:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c62e41f-fb5f-3d16-9875-a9837b2675e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8460::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:57:41:60:23:18:03:20:ea:91:af:d1:e3:d9:8d:78:a0:47:
96:18:12:71:fa:74:86:04:6d:d9:ba:30:c6:d1:79:5c:df:9a:
ff:69:75:2e:6f:93:1a:c1:35:9d:27:bf:1d:84:fd:55:2c:57:
0d:04:9d:fa:c6:2f:db:f4:0f:4a:00:be:2e:4a:73:79:5c:aa:
66:ff:2f:09:3d:db:52:4e:f1:38:c1:1a:25:b8:72:c9:8a:01:
34:c4:6f:70:2e:e3:b0:d9:ef:f1:9a:a2:3f:f2:a6:7a:0e:dc:
66:ed:d5:43:b1:ce:ee:30:27:97:c6:e2:d1:33:ee:47:c0:55:
b8:35:69:ab:01:31:d2:ba:ac:7f:01:1a:02:c2:34:85:56:78:
23:0c:82:b8:9b:28:ae:3b:13:79:c2:dd:66:5f:ab:c5:6c:34:
55:d9:af:38:b9:c7:76:15:2f:ad:99:57:74:14:4e:43:10:17:
c7:bc:1a:93:28:d3:d2:66:b6:a5:d0:d1:91:40:89:17:66:9d:
71:ad:bf:bb:14:3b:6d:c9:b6:33:7a:7e:47:d6:a8:f1:7f:27:
8e:dd:f0:3b:d3:34:4d:85:b1:22:13:81:cd:3d:16:27:c6:11:
35:64:c2:22:1f:74:67:4a:d4:83:40:26:bd:94:f4:d3:00:b7:
0c:89:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:16 2025 by rpki-client