Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687412cf-3224-332d-a7e1-d6a1af10ba6c.roa
File: 687412cf-3224-332d-a7e1-d6a1af10ba6c.roa (raw, json)
Hash identifier: uiaIgdsMqcwmkQ6AcCiCyZ3Gm1oSOzFqJUMLbUAYyP8=
Subject key identifier: 9E:5A:E6:2B:B2:13:C1:FA:96:06:AE:E6:CB:EF:FE:62:A9:D7:E5:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD63FCB8985DA7F5DAED0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687412cf-3224-332d-a7e1-d6a1af10ba6c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 2001:559:855f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d6:3f:cb:89:85:da:7f:5d:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1b032728-4fa0-4ed2-841d-2e534654553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:66:48:d1:d0:9b:11:40:42:d9:87:13:b8:
34:80:2e:44:6c:0a:be:d5:74:b1:e5:15:53:f7:a3:
8c:53:97:47:3b:d9:a0:cc:3f:5f:36:bc:a0:4e:61:
45:a8:9b:1d:cd:fc:17:2b:60:e6:7f:d6:51:93:3b:
c7:02:5e:ec:09:bc:c0:ad:69:dd:ea:28:55:ef:c8:
6b:fa:26:00:fd:51:14:d3:00:68:d7:d4:80:57:bb:
69:11:3f:71:2d:ff:96:59:5b:17:53:01:2b:6d:36:
f2:f1:ef:d5:f3:f3:6f:1f:ad:b8:c0:c4:e9:e9:1c:
ee:c9:be:38:bc:c0:37:c3:1a:f1:04:e4:b9:95:55:
9f:f6:f6:de:a0:6e:d3:91:b7:83:da:63:50:5f:c3:
15:d8:5d:ee:fc:15:86:fd:cf:83:83:4a:1a:82:3c:
b7:96:01:f6:8a:5b:68:09:94:f0:7b:58:48:2a:e2:
a5:2c:ec:18:39:1a:eb:e3:38:6e:d6:b3:5b:83:2b:
6b:f1:ab:ba:96:49:ad:40:f4:ba:d4:1c:6b:e1:e4:
88:bc:23:90:eb:72:7d:d1:fd:ca:46:bb:67:56:c5:
d2:ec:fd:f2:e6:04:1a:45:15:0a:aa:94:ef:19:39:
76:08:6c:0d:63:07:0e:71:5a:c6:6b:25:30:94:bc:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:E6:2B:B2:13:C1:FA:96:06:AE:E6:CB:EF:FE:62:A9:D7:E5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687412cf-3224-332d-a7e1-d6a1af10ba6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:855f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:21:a0:6b:e3:36:dd:0e:2b:ce:54:79:ab:eb:c6:a0:db:ed:
30:ee:d1:45:a7:38:b2:01:48:8a:df:cf:e9:91:c4:1a:aa:9f:
0a:19:f2:e0:4d:61:c9:06:1d:d8:88:1b:cf:f4:02:38:b4:c0:
dc:73:4f:e4:6c:20:15:6e:ad:99:bf:5f:60:08:0e:da:b2:b9:
99:b8:18:c7:44:cb:a8:60:0e:d2:6f:b2:88:d3:25:17:f6:9c:
26:2d:1e:a2:bf:9c:02:55:9b:d2:fa:3c:6c:28:14:5a:7a:5c:
2b:80:cf:db:af:8d:f7:20:0d:ac:5d:6d:4f:f2:a7:9d:8b:da:
69:6d:f4:21:5b:6e:a6:08:50:29:3f:0f:a2:2a:1e:0d:80:b6:
fc:75:eb:94:e4:02:82:84:f9:e3:20:fa:e2:03:40:12:38:94:
d5:b9:60:d4:3e:25:b2:4c:02:f6:06:4b:a5:e2:b1:8c:59:04:
fb:1a:0e:1f:cd:52:21:3e:75:1f:04:55:d8:2b:c9:75:0f:55:
06:f8:3c:6b:9a:51:96:4b:a7:b7:27:f8:f2:75:3e:7f:ba:60:
a8:d2:34:c7:83:62:c6:0a:8a:4f:8e:85:7a:70:d5:e3:d7:5e:
cb:88:3c:fd:62:8e:a8:ed:e3:39:41:d1:0e:e5:dc:5c:48:e5:
c5:99:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:21 2025 by rpki-client