Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1064dae-0a3a-3871-a113-e7d14f175096.roa
File: a1064dae-0a3a-3871-a113-e7d14f175096.roa (raw, json)
Hash identifier: RWS43cAFgKDiZw9fob2CYjTbOZXp9w7NfuEhAXQGupw=
Subject key identifier: AB:83:CE:C9:A8:A4:96:4F:D8:E8:F7:97:EB:36:39:4B:06:36:20:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D7F03DEB704BAFC882200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1064dae-0a3a-3871-a113-e7d14f175096.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33652
IP address blocks: 2001:559:c0a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:7f:03:de:b7:04:ba:fc:88:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8456e7a4-48b1-424a-967b-6d56108b945d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:f2:13:31:c2:b2:32:6c:bd:7c:6a:e3:fe:
bc:0c:32:7b:1d:9f:ea:ba:3a:ed:0d:4f:6e:49:72:
eb:c6:ef:eb:ce:a2:cf:02:dd:de:21:c5:4b:d7:e8:
c1:fa:67:e5:ee:9e:03:88:a2:2d:a8:6f:e3:34:15:
cc:c4:5c:24:78:c3:a5:1a:e9:2e:dd:31:0a:bf:aa:
c5:35:1b:ac:bf:77:b3:02:7b:5d:31:c1:5c:14:2c:
de:d7:08:0d:af:0d:0d:47:39:dc:ad:f6:f4:20:fb:
9b:02:80:a1:d0:22:9b:8a:5a:03:84:34:5b:28:f8:
dc:31:31:a9:2a:a7:82:c5:32:3f:51:9c:69:56:fc:
d4:06:51:47:43:02:a3:85:90:80:e3:52:3f:30:ee:
bd:d7:2b:2f:46:5c:11:08:d7:cc:94:a8:9e:3e:77:
cd:f0:8a:ec:b3:73:47:b9:68:49:b3:d9:bf:61:9f:
30:8b:e3:9f:3c:59:2a:a0:25:ab:ee:c2:0d:e3:a5:
94:9b:0c:af:12:bd:2e:da:41:3e:e3:be:66:d0:f3:
7a:65:d9:21:1d:68:76:56:49:d8:ea:14:61:fc:6a:
bb:07:20:df:37:77:cb:60:fd:30:23:5f:da:bf:3d:
15:b4:f4:b6:7d:4c:93:5a:2e:8f:b7:9f:05:93:ae:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:CE:C9:A8:A4:96:4F:D8:E8:F7:97:EB:36:39:4B:06:36:20:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1064dae-0a3a-3871-a113-e7d14f175096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c0a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:bf:f9:c7:04:c7:98:04:24:a3:9a:18:cd:bd:1e:d4:88:50:
86:98:83:0d:7c:8a:1b:11:ab:7d:12:e6:61:2c:56:28:82:96:
7a:78:d3:d5:65:da:e7:38:00:ae:d9:b9:5f:a4:e4:ef:40:f3:
91:b5:87:a2:85:a8:97:56:0b:39:2e:ba:fc:28:e3:f2:23:40:
dd:ca:a4:ad:40:31:64:8a:b0:ff:fe:aa:3a:b1:a3:58:9c:32:
05:b5:67:45:3a:0d:1a:a2:80:e3:07:cc:78:f6:72:b7:56:fa:
07:29:13:e1:aa:9f:16:03:12:bf:0e:a0:27:0a:35:ec:41:89:
fb:5e:59:ac:bb:ee:ef:22:5e:91:a3:b6:7a:2e:8c:5a:c6:2e:
65:cf:71:a3:07:f3:a1:fc:fb:f0:85:12:5b:64:ae:04:be:2d:
67:18:7a:3c:22:9b:08:ca:7a:e1:94:5c:f4:06:15:0e:17:71:
ec:af:e3:46:a4:bc:1d:2e:3d:a3:de:50:a0:4e:21:72:c3:df:
66:2b:ae:15:c5:e0:0f:86:84:69:4f:42:d0:a3:8d:2b:81:ab:
35:5d:8c:d5:ba:70:63:44:97:12:9b:0f:8f:b4:5e:a8:1c:92:
96:92:c7:a6:73:9a:fe:4a:57:8e:fe:13:9b:a6:02:08:de:e3:
5d:ed:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:18 2025 by rpki-client