Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70dba30a-b6f1-3010-b1a3-73cb04e3367a.roa
File: 70dba30a-b6f1-3010-b1a3-73cb04e3367a.roa (raw, json)
Hash identifier: NqUeacmfTUGX1Lt/bYE9b0ckpdqrx8XQpbjQaXlJ2tU=
Subject key identifier: 67:BF:B6:E3:0C:4D:44:7F:BD:C8:E8:EA:E0:BF:EA:5A:A2:9E:F5:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E118498EA7AD861456D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70dba30a-b6f1-3010-b1a3-73cb04e3367a.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 2001:559:c19e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:11:84:98:ea:7a:d8:61:45:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=e71e50c7-d722-49d3-af81-53ff624b1f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:84:5e:e3:7c:40:ef:62:6f:64:73:54:bd:
2e:21:43:32:f1:7c:84:63:b9:c5:76:99:b5:ef:f6:
7d:be:25:de:89:59:d8:29:17:21:41:b9:a8:23:5c:
c7:99:1f:f0:41:0f:16:46:41:25:a8:41:bb:4e:f1:
a2:df:56:98:79:cd:ba:da:15:bb:2d:5c:41:58:cc:
54:ed:0a:45:01:bc:2d:4f:75:af:e3:dd:3f:ad:7d:
94:1e:95:19:5e:a2:6f:3f:75:bd:21:f3:1f:08:0d:
db:52:3d:4a:14:eb:20:42:86:2e:bc:ff:ad:85:07:
d0:69:9c:f0:30:9c:1e:65:cc:46:bd:34:ad:0c:ff:
5f:08:09:ef:6b:de:f2:72:bb:93:30:0a:69:62:2f:
c4:27:0f:32:6d:27:49:5f:41:9c:91:fb:a6:ba:af:
8c:3e:59:36:d1:d6:95:90:5a:aa:13:c4:c9:8f:3c:
52:63:7f:21:9f:d2:40:88:5c:66:43:c9:12:5c:9f:
fa:f6:45:08:3a:da:4c:90:38:10:50:65:55:a3:ec:
aa:a4:71:8c:4e:36:df:6b:e2:53:c9:45:6c:e0:0c:
7b:44:c5:2c:30:48:8e:db:01:74:ef:30:b5:9c:06:
f5:c8:5b:68:7b:7c:66:84:e1:aa:5c:92:a5:b2:9f:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:B6:E3:0C:4D:44:7F:BD:C8:E8:EA:E0:BF:EA:5A:A2:9E:F5:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70dba30a-b6f1-3010-b1a3-73cb04e3367a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c19e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:7d:f0:bb:8b:ba:24:37:fa:f9:3f:32:82:b9:29:9e:65:7a:
e2:26:3c:07:c4:88:b9:0e:1d:ff:bc:b3:71:ba:fd:bc:f2:1e:
47:8a:e8:3f:82:c1:0c:0c:09:71:b1:ce:90:98:e7:4d:64:e2:
cc:a4:07:2a:09:0e:9b:be:f2:c9:9a:f0:16:a8:69:9c:b7:f8:
2c:c7:49:df:6a:f4:36:ce:a4:2a:99:6f:52:48:a3:5b:db:79:
e6:98:85:0f:7b:20:53:72:b2:ec:86:9f:4d:9d:f7:b8:b1:12:
ba:e6:6a:24:b2:a0:22:2c:c2:4e:30:c5:a9:8b:0a:7c:fa:c3:
5f:ad:70:e9:de:81:be:c6:27:e5:49:df:6f:d3:5a:8e:03:af:
b1:9e:63:7f:84:dd:a3:77:d9:16:e1:8e:e8:ac:c0:4c:dc:d8:
c3:19:79:91:1e:bd:20:5e:6f:4e:9d:95:d4:28:b6:60:c3:9e:
82:62:98:6b:5c:a2:eb:51:a3:6a:86:1c:ee:40:56:4e:36:18:
8c:f1:dc:65:98:82:f9:15:1a:f9:53:cf:db:91:04:a5:19:8e:
72:f5:d1:c3:90:3f:26:c3:86:e9:4b:d4:fb:2e:4e:99:1e:58:
cc:4f:f5:57:e0:8a:2b:bd:c4:25:8c:45:4c:57:14:c0:7a:a7:
19:1b:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:55:53 2025 by rpki-client