Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b86f3238-f0e0-305b-95d0-04caa3ff8075.roa
File: b86f3238-f0e0-305b-95d0-04caa3ff8075.roa (raw, json)
Hash identifier: MGhYSuqnWXFcCKb2XlitURo97Ael3PdapqUXlPRo2gs=
Subject key identifier: 5B:35:D9:9D:26:A3:B6:35:D7:05:2F:03:DE:3D:5E:07:03:16:AA:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D60CB05864042A9F43000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b86f3238-f0e0-305b-95d0-04caa3ff8075.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33650
IP address blocks: 2001:559:848b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:60:cb:05:86:40:42:a9:f4:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a03621f3-434f-4467-b2e4-e819c835731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:8a:63:ed:76:ea:fb:cd:d7:8a:69:1e:96:
3d:6f:15:1d:45:4f:51:9f:ff:e3:c8:97:0f:15:67:
8f:3a:68:f9:e9:a2:dd:eb:a4:55:d5:f3:b1:9f:83:
1a:18:93:62:3f:40:07:17:05:fb:06:48:c5:8f:0c:
56:a4:44:03:44:d3:6b:21:4c:86:7a:d1:fa:20:37:
b3:59:d7:9c:32:08:73:df:35:2e:5e:67:0a:44:0c:
0c:fc:21:94:4d:c4:92:f1:77:ff:dc:4a:b9:81:94:
ce:e1:d6:10:52:61:9f:ec:05:ab:df:7b:fa:db:99:
d9:f3:c8:dd:9c:7d:bf:0b:36:b8:e8:35:10:d2:c1:
b1:71:b2:62:9d:37:ba:c5:81:da:33:3a:7b:ce:85:
1d:e5:a2:fc:33:cf:e1:c5:81:53:3f:42:c7:fd:4e:
42:e7:81:e6:c9:c3:c8:49:fa:68:4b:9e:76:64:7b:
c4:60:20:28:20:5c:3c:df:64:93:e0:73:df:bc:cf:
36:49:92:fb:be:89:6c:d2:ad:9e:2b:8d:f0:c1:2a:
3a:79:8c:96:de:4c:99:44:4a:60:07:24:f5:34:dc:
04:68:a6:a9:65:50:9c:69:14:c0:71:03:cc:20:78:
c1:2e:ad:dd:44:cf:13:90:bf:bb:6b:6b:43:42:64:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:35:D9:9D:26:A3:B6:35:D7:05:2F:03:DE:3D:5E:07:03:16:AA:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b86f3238-f0e0-305b-95d0-04caa3ff8075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:848b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:9f:a8:2b:31:4b:73:07:9b:84:7c:25:2c:55:d2:a9:91:6f:
0a:5c:14:f0:14:1c:93:ab:91:36:5a:53:8e:65:e1:54:13:50:
fb:b0:be:fd:37:00:f3:79:69:cb:4a:29:69:cd:6d:df:05:a3:
1b:cf:02:b2:46:cb:51:4d:f0:87:53:84:25:06:07:f0:b2:d8:
0b:a7:90:66:3d:8c:eb:c8:fb:fb:54:53:6b:08:1c:05:8d:c5:
60:00:5d:7b:f8:d3:14:48:14:b8:26:8f:b4:e2:e6:42:23:eb:
50:50:8f:50:c3:85:40:89:6b:52:f2:cf:8b:89:59:fa:d1:44:
65:ae:21:5b:52:62:a1:0d:a3:87:6e:e7:31:d1:d4:2e:c0:24:
83:ed:96:c8:0d:1c:83:fe:29:de:83:c3:81:3f:29:c9:47:47:
0a:2e:f3:ed:59:19:50:af:ef:a4:8f:a1:36:c6:52:75:0e:d1:
43:ae:9f:d2:e9:8b:ee:47:13:bb:bd:0d:b2:e0:49:ec:07:dd:
3c:28:8e:6f:59:1c:14:cc:15:6b:33:a3:d0:4a:ef:a4:62:c5:
27:b8:04:ec:de:94:af:f7:08:9f:9e:07:46:67:e4:66:68:94:
10:86:d7:02:4c:9d:39:6d:b2:72:1e:45:1d:3e:d1:ea:57:9b:
2b:83:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:43 2025 by rpki-client