Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a345033-4a9d-35fd-a24f-396b1af16027.roa
File: 9a345033-4a9d-35fd-a24f-396b1af16027.roa (raw, json)
Hash identifier: Cn8xvSkKxlfDF20eZnQfl9+kC6KwRczus2FN1q4nX1E=
Subject key identifier: E2:A2:63:7E:6B:8E:14:CE:17:F1:9B:D2:57:E4:8B:96:49:E7:A5:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C077BA5D090A1DE12AAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a345033-4a9d-35fd-a24f-396b1af16027.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33652
IP address blocks: 2001:559:809d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:07:7b:a5:d0:90:a1:de:12:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ff2037b6-35ed-4f9a-94fb-8510f7de331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:92:23:6f:a1:08:a3:c4:9a:2c:ef:d8:5d:
26:d6:39:8d:ee:b1:cc:81:29:cc:4f:e7:96:7c:f7:
98:ce:03:63:6f:cf:4f:f0:13:8d:85:7f:40:ec:8f:
4d:1f:83:ba:69:9e:24:ef:87:02:57:dc:1b:ed:d5:
39:9e:da:f0:12:bb:52:c7:6b:36:65:f0:ce:21:79:
d9:77:95:8b:a1:88:cf:9f:0f:9d:c7:70:ad:cc:90:
ed:b7:28:d4:4b:21:a4:a6:e6:35:77:62:a3:7f:9e:
5a:3d:cb:c0:d9:0b:28:60:5b:59:ea:38:3f:09:83:
44:19:ad:56:d2:31:cc:05:8a:82:26:c5:8e:d3:25:
cc:7f:b2:18:95:29:23:83:a1:b4:07:47:f3:24:0a:
9e:46:b7:bc:88:eb:34:06:c1:11:c0:85:7b:b8:0c:
7f:49:90:c0:ff:87:ed:f9:1e:8e:20:86:0b:ab:a3:
88:41:5d:0f:14:5a:45:6c:05:71:05:30:b1:25:64:
e1:54:e9:01:28:b5:e8:c5:31:82:a9:a9:d4:38:0c:
74:d5:2a:ed:36:2c:3d:34:3b:ff:b9:ae:53:d5:c8:
cd:4d:9c:53:75:ff:b4:69:6a:db:47:8b:66:c0:ae:
e0:cf:35:50:ed:f2:de:e2:6a:05:16:7a:4c:06:93:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:63:7E:6B:8E:14:CE:17:F1:9B:D2:57:E4:8B:96:49:E7:A5:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a345033-4a9d-35fd-a24f-396b1af16027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:809d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:07:5d:e7:b6:1d:39:ee:bd:bf:e7:66:ac:64:e4:9d:56:b0:
43:de:eb:0f:75:d3:f4:cc:02:74:61:f0:09:82:fb:22:b9:f7:
e9:78:c0:d1:39:a7:fe:50:6e:66:76:20:a8:bf:11:15:f3:61:
c8:5a:df:13:be:28:d4:b1:67:a7:87:62:20:d9:18:44:f0:da:
77:1f:91:43:1e:46:8f:24:a3:11:57:76:7c:ab:bc:64:5a:6e:
69:5f:f9:7b:f5:da:5f:4d:54:b1:20:32:3d:5d:19:fb:1a:5e:
c5:0c:80:68:30:82:e0:b6:ba:a3:81:dc:72:9e:1b:d3:2e:2c:
75:25:8f:2d:71:56:f6:ec:c4:73:43:87:9e:22:ab:1d:02:b0:
4e:34:56:b5:b5:0a:0c:43:96:5a:4a:78:d9:86:fa:e8:51:80:
b2:6a:60:84:81:75:e4:c9:ec:48:da:90:b2:73:5f:41:8a:66:
f0:b7:fc:eb:cb:b4:0d:08:f6:ae:0b:3f:65:de:09:a9:5f:7a:
a7:94:08:50:90:dd:9b:4e:09:93:82:e3:3a:73:4d:4d:37:ce:
74:1d:11:6d:4b:97:c3:65:d6:21:1f:7f:b6:e2:89:21:fe:83:
b2:bb:c9:5c:31:58:7e:4d:1b:62:b4:2d:02:b3:fa:66:06:0c:
6c:c8:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:52:00 2025 by rpki-client