Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3f911e3-bf31-3f78-b5fe-28bbd8aede5f.roa
File: c3f911e3-bf31-3f78-b5fe-28bbd8aede5f.roa (raw, json)
Hash identifier: eW1gDYJG2HdJDR96VEppmfoN8rglxreKUbgZJFoaY74=
Subject key identifier: 26:FE:D3:20:3D:7B:E2:A1:B3:2F:E4:43:8B:39:32:FD:28:94:39:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D8375BFA234A50E897300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3f911e3-bf31-3f78-b5fe-28bbd8aede5f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33660
IP address blocks: 2001:559:2a3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:83:75:bf:a2:34:a5:0e:89:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9cf2b738-c68a-459e-8daf-d6991661dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:a5:7d:16:73:c3:0c:b0:f6:85:1e:65:26:
da:60:23:02:19:55:0e:17:9e:f6:ea:74:f6:ad:f2:
95:77:fd:c7:c9:48:8d:97:0d:72:31:08:dd:14:fc:
28:fa:46:c9:9e:ce:dc:dc:3e:ae:69:9b:82:a2:05:
4e:5d:b7:97:c6:19:17:5a:ae:f6:3e:9a:08:c3:24:
cf:05:d0:a2:54:b7:1f:3f:fa:60:fc:ca:cd:4c:8f:
d0:4d:30:55:73:01:a5:ac:70:58:b1:18:b1:4d:0a:
20:54:b0:cc:3d:c6:c1:4d:2e:e9:b8:60:a8:bd:ee:
37:cd:d2:00:94:d8:57:9c:dc:17:13:49:fc:2f:9d:
b3:9f:87:aa:65:79:17:ce:0c:8a:ac:3f:bc:be:dc:
cb:9a:c1:f1:0c:4b:2f:30:08:b9:eb:7d:b8:5f:63:
79:97:17:e4:5b:a1:b2:11:e6:22:64:1c:52:13:76:
a2:b8:99:68:bb:91:5d:e7:ca:df:75:35:fc:d2:35:
df:d5:51:b5:58:98:f7:35:9b:89:90:72:88:66:e7:
01:ad:88:99:80:f0:ef:90:8e:22:aa:9b:1b:7d:c3:
fc:6b:97:c9:3a:ae:43:7e:38:35:2e:f3:58:28:d3:
d4:3d:e0:86:96:bd:fb:fb:27:ad:2e:ec:39:56:de:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:D3:20:3D:7B:E2:A1:B3:2F:E4:43:8B:39:32:FD:28:94:39:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3f911e3-bf31-3f78-b5fe-28bbd8aede5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:2a3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:1d:85:61:61:71:2a:44:6a:4e:0a:77:fe:8a:d4:dc:cb:49:
92:c3:1a:85:40:b1:d0:d2:0d:4f:0c:5b:38:f1:c0:7c:c5:63:
7c:4c:81:19:07:11:05:c1:47:4a:5a:59:ec:8a:67:1c:0b:7c:
3d:e9:fd:2c:eb:e8:fc:be:04:8a:51:29:ea:fd:6f:b8:d9:d0:
eb:b0:29:59:78:a2:b7:ad:00:66:dc:95:89:41:68:1c:c4:ac:
eb:dd:20:5d:06:66:0b:1c:ea:55:d4:00:1d:89:d4:03:e2:d2:
77:6f:cb:2e:d4:a1:26:c8:d5:cb:36:cb:ea:5e:d0:61:18:4f:
e3:45:31:44:08:ab:02:e2:03:70:2a:6d:79:3c:81:bf:fc:1b:
ad:31:3a:c0:32:28:24:27:b8:93:2d:06:dd:a1:b9:e3:d7:a5:
b9:bc:8d:ed:f3:88:d5:1b:f6:8d:d7:cb:54:a4:47:2c:3b:f3:
c9:15:3e:69:b3:72:4d:75:b2:5f:78:b0:fb:5f:57:ad:ea:13:
35:80:4a:b4:b8:fe:85:ac:e1:ab:5d:4c:cf:3b:07:72:f3:39:
22:95:d0:37:2e:56:79:b9:11:dd:98:17:8f:0d:44:9c:f1:2e:
e4:6c:2d:dc:4d:09:61:83:60:2a:85:a9:e3:4b:bf:51:0a:c1:
e4:7f:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:15 2025 by rpki-client