Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da9c928-16d9-3771-ab1d-0fc5fba25d3d.roa
File: 9da9c928-16d9-3771-ab1d-0fc5fba25d3d.roa (raw, json)
Hash identifier: DytTmiSuER6LTcEQhFzurrjF7k/tvEGqDKkFqkHr2Ms=
Subject key identifier: C4:9D:64:1B:05:09:B7:A8:15:09:16:7C:01:F3:E4:6F:C4:50:A9:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F6345B56107B481C71C480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da9c928-16d9-3771-ab1d-0fc5fba25d3d.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 2001:558:2b1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:34:5b:56:10:7b:48:1c:71:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=58f08407-ba10-47b7-9de0-34d8342a21da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:c1:a1:f3:d0:29:f9:00:8d:e5:d0:b0:d2:
c8:98:52:92:4b:cd:ec:fe:6a:ba:d4:3b:2d:fa:16:
92:c6:28:bc:c2:cf:f8:8a:77:04:d8:12:d9:d1:ae:
7b:35:a3:09:75:27:ed:c9:ae:12:dc:cb:8e:50:60:
e5:38:f9:08:40:c4:da:f5:f9:d8:88:f0:63:0a:7c:
53:78:76:dd:12:4d:6f:11:1d:f5:5a:2d:ac:6f:41:
ba:92:2b:ac:86:3e:f1:e2:46:66:a8:ce:9c:22:12:
c7:63:db:36:fd:a8:77:d3:4e:39:e0:3b:ae:e4:bd:
8d:05:21:b5:d8:e2:54:82:6b:5d:ef:49:55:32:24:
c1:25:c9:84:39:67:ed:77:d1:98:18:82:5d:48:27:
f3:af:3e:be:e3:15:83:09:8a:a3:0a:83:29:92:ef:
3c:64:bc:ce:c9:19:17:dc:37:6c:91:75:1b:8c:55:
46:6b:27:68:5f:d2:df:12:5f:02:00:b7:74:c1:47:
49:fb:0c:5f:93:ac:69:a5:33:52:10:5e:2a:0e:a7:
0d:c6:6a:25:53:df:f5:08:25:d2:93:a8:b3:54:86:
18:84:16:64:ab:4d:0e:88:7a:72:fc:28:ee:7e:2f:
c9:f2:05:ce:b7:76:c2:f6:68:da:6e:39:18:ca:a4:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:64:1B:05:09:B7:A8:15:09:16:7C:01:F3:E4:6F:C4:50:A9:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da9c928-16d9-3771-ab1d-0fc5fba25d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:558:2b1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d0:08:6b:8b:b6:08:83:0d:7b:60:dd:83:20:26:ec:04:7d:
08:21:7a:9d:da:fb:2f:40:62:fa:94:1a:40:9f:fa:ce:03:b4:
5c:c8:d6:c9:a2:52:e4:ca:28:6e:61:6b:eb:02:9a:12:65:aa:
ac:8a:6c:ae:44:61:89:1d:61:95:6d:25:fe:aa:3d:c7:e5:10:
73:0d:48:0c:4d:2d:d2:cf:e9:20:e9:db:17:c9:bd:4b:08:66:
2c:b4:f9:c3:eb:59:1c:75:08:26:ca:0d:0e:07:0c:db:16:19:
7c:2b:b4:df:a2:2c:25:e6:4b:40:dd:b1:e1:ad:db:53:59:3a:
91:ca:14:69:64:4d:95:42:0a:58:9b:63:70:2a:27:1b:39:69:
14:9c:fd:ec:47:b5:24:c8:1c:2b:a1:59:10:68:c5:c6:16:e7:
4f:cc:a5:ee:2f:56:3d:6b:6a:5e:4b:6e:9f:3b:ee:7f:ae:9b:
3e:1f:47:8a:f6:db:a9:8f:70:35:82:5d:64:f4:c4:6e:f3:74:
50:51:57:e8:8a:03:19:87:8a:53:37:09:35:5f:09:3f:fe:d5:
a5:f4:37:24:a4:0d:12:68:23:bb:1e:f7:ac:b4:89:61:a0:18:
26:bd:fa:00:4e:50:e8:69:09:3e:44:b8:e3:b0:d4:bf:74:7a:
dd:c7:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:46:28 2025 by rpki-client