Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bc8b98e-3a7c-3999-90b8-46ee0715c03a.roa
File: 8bc8b98e-3a7c-3999-90b8-46ee0715c03a.roa (raw, json)
Hash identifier: BWxnPx+jBBeCpH0Tha7sxBwYrVzzkPdVkHDU3mcl/+k=
Subject key identifier: 85:D9:78:7B:D9:98:B1:BC:03:99:B3:4E:43:DF:44:14:43:98:00:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D7C1D32A03446A5A5E780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bc8b98e-3a7c-3999-90b8-46ee0715c03a.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33652
IP address blocks: 2001:559:3d6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:7c:1d:32:a0:34:46:a5:a5:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=55a7564d-69af-4f79-acf3-753933b98e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:11:b8:ec:80:6b:a3:d7:b7:91:c4:3e:67:
17:58:5e:4a:45:93:f5:e1:00:01:f6:3a:bd:8f:4f:
71:8c:57:0c:00:c6:02:fa:8e:85:82:06:67:e1:a1:
43:e5:e0:44:74:b1:b7:63:e7:ff:bf:49:4f:89:79:
e8:35:0e:91:df:9b:1f:94:1d:8a:07:fe:12:fb:cb:
4b:ef:51:8c:8d:63:0c:cd:a8:98:9d:f2:db:c5:5c:
cf:28:9a:f9:22:fc:a4:bc:4b:46:a8:af:1a:58:16:
b6:df:69:d1:a7:5c:12:5e:06:4f:70:d8:cc:b6:14:
b5:86:fb:02:31:30:e1:cc:50:34:69:6c:11:fd:84:
43:f0:29:e0:43:c5:83:f6:f0:90:38:e6:9a:41:24:
ac:2c:9c:75:6f:5a:16:8c:29:07:36:9e:73:ab:3d:
df:8e:7e:a4:47:f0:d6:04:3c:3f:0d:af:6d:8a:6e:
48:95:5c:9b:a3:d8:0a:98:28:f0:4d:a1:a7:12:d2:
05:eb:b0:c6:1d:58:96:a1:69:aa:c4:17:45:b1:ba:
e7:2c:81:a7:50:2b:b6:57:d2:1d:9c:63:a6:21:54:
4c:2a:8e:22:11:b2:be:c5:90:2b:fb:ac:41:24:fb:
99:80:6d:eb:20:67:47:f4:94:7a:4b:f8:76:8b:18:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:78:7B:D9:98:B1:BC:03:99:B3:4E:43:DF:44:14:43:98:00:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bc8b98e-3a7c-3999-90b8-46ee0715c03a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:3d6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:de:f3:56:c3:dc:2c:79:6c:1c:df:b4:e7:35:a6:f2:46:d0:
8b:b6:ae:5f:03:d1:8d:5e:1a:cf:ac:ba:df:19:25:78:43:59:
6c:38:7c:6a:a1:35:be:81:4b:2e:e5:36:92:52:4b:98:d7:fa:
97:f9:76:14:6a:9f:3a:54:d6:be:23:e5:84:fb:5e:24:c6:ec:
d7:28:7a:c1:9b:2a:59:28:cb:2f:28:f1:a4:24:1f:c4:df:eb:
c9:50:66:eb:03:8b:02:01:7c:cc:95:97:f4:57:98:73:03:e7:
cb:00:77:69:00:65:cb:56:68:2f:81:7a:99:f1:94:62:d3:89:
ba:2f:f9:c5:29:e1:c4:a1:cb:ee:ad:8d:ec:6a:8e:13:8c:99:
93:2e:f8:02:8a:c6:e5:a5:42:9d:ad:07:d3:20:bb:1b:55:92:
cf:d4:2f:0b:23:31:ec:aa:94:fb:88:1f:be:64:28:80:22:2a:
60:be:9c:a5:6b:46:bd:5c:50:1b:32:f7:13:28:ea:dd:1f:85:
b0:69:67:0e:39:c4:d8:0a:d4:6a:82:f5:9d:15:6f:8a:3d:c5:
31:1a:90:be:43:a4:f9:28:6e:62:56:c5:3e:44:88:c3:ad:df:
d5:2c:27:48:06:af:a5:c8:84:31:69:d5:72:39:26:af:a9:70:
36:75:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:47 2025 by rpki-client