Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0ae38c-82ad-30e9-aa8b-3c80bad7b8a5.roa
File: ba0ae38c-82ad-30e9-aa8b-3c80bad7b8a5.roa (raw, json)
Hash identifier: 4DD9OmgfWmhFl4m6vCQzXQSOO30dBenNVn9jzTXjjs8=
Subject key identifier: 44:D9:29:D9:55:CC:F9:0C:AB:17:F2:99:C6:ED:00:62:02:70:13:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD56449D9F70A284D3380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0ae38c-82ad-30e9-aa8b-3c80bad7b8a5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 2001:559:804f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d5:64:49:d9:f7:0a:28:4d:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=0a7863c1-b90b-4f5e-b597-a0b77f9769d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:ed:8e:57:da:13:e0:d7:7e:f7:e6:29:d6:
c4:12:62:f3:04:84:f9:61:fd:df:e2:b9:bf:06:c1:
c1:12:f2:c5:d9:de:52:05:55:73:94:e3:2d:ac:76:
4b:8c:c5:ea:9c:a4:34:bd:50:2e:4e:96:c0:71:5c:
d9:93:81:8e:84:e7:40:3d:4f:42:7c:c7:a8:bc:de:
e5:04:54:39:76:f5:d8:f9:00:3f:f5:cd:f2:0e:8d:
05:36:3e:c5:cf:7a:10:0a:d4:5e:8a:b3:b5:3a:c5:
4c:5c:b5:2c:d9:b0:7c:d2:a7:db:0f:99:0e:cb:1a:
ca:1b:0a:a4:ee:1e:57:67:18:95:e8:af:f0:70:79:
60:d8:8b:58:71:31:48:84:0f:2d:86:9c:2a:01:4e:
2a:80:05:13:73:f3:3f:19:d1:b6:f0:5a:46:d8:1f:
7c:f3:8d:ef:a0:d6:cb:f5:4b:9f:dc:85:41:9a:ec:
68:5e:54:53:ef:48:6c:c7:93:85:ee:af:84:d0:b3:
b5:f1:d3:7f:99:8c:5e:8e:d4:98:43:be:1d:21:bc:
73:cc:bc:54:56:58:3f:1b:06:d3:3e:2a:47:0c:f9:
a8:f6:79:a2:21:ef:49:84:e0:5f:b6:3b:fe:02:9e:
2d:e3:3d:b2:0f:54:5e:90:8b:d9:5e:76:a5:f8:35:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:29:D9:55:CC:F9:0C:AB:17:F2:99:C6:ED:00:62:02:70:13:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0ae38c-82ad-30e9-aa8b-3c80bad7b8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:804f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ac:ce:2e:a8:62:21:de:de:ef:a5:7e:c4:d6:0b:16:92:ed:
0b:45:73:a9:cb:99:1e:0c:f3:10:aa:43:7b:eb:48:4d:36:3c:
7a:73:bf:cc:e1:f3:bf:f5:a8:c9:4a:64:f6:62:1f:71:06:a4:
ce:16:19:a4:d7:fb:b0:14:29:7d:43:f2:50:ad:b2:0e:e2:0a:
79:ae:91:e7:33:58:1f:1b:a7:72:a6:70:87:a2:e4:fc:18:13:
fc:a6:9d:d2:d7:5a:5f:e7:76:4c:c0:b0:14:e1:6d:7d:8d:53:
8b:ac:4e:c5:c3:f5:6a:87:41:66:76:c7:3a:52:1d:c7:64:7f:
84:d8:b4:16:6d:35:b0:da:d4:fa:fa:f3:95:cd:2f:53:9e:cf:
1b:c2:f4:99:c2:7f:98:f7:8c:7d:83:c0:6e:c8:64:3a:c3:2e:
63:d7:3f:e3:e8:3f:df:65:b7:cc:ba:a6:e3:49:44:84:76:4a:
14:9b:e5:ed:b2:dc:4e:bb:05:74:e8:7e:43:eb:63:ba:82:51:
40:57:93:20:54:ff:ef:c5:07:64:9c:e6:65:34:69:f9:cf:cc:
a0:8f:4b:cb:99:88:26:41:61:60:7d:ea:e8:67:8c:6a:98:4c:
5d:e9:85:74:be:0c:45:9e:67:ac:c9:57:2b:f8:69:c1:64:74:
c5:a8:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:00 2025 by rpki-client