Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc18e776-039a-3842-a1b2-72b3f78f1a1d.roa
File: cc18e776-039a-3842-a1b2-72b3f78f1a1d.roa (raw, json)
Hash identifier: dErRAqTXA/j4bWKO08EC1qRXjm5oltW9OxncxJEaWxk=
Subject key identifier: 30:71:10:E8:3F:FF:6E:3A:D7:42:EE:31:AA:83:50:94:C4:FE:32:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D7EA9DB3505A1697CBBA1
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc18e776-039a-3842-a1b2-72b3f78f1a1d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33652
IP address blocks: 2001:559:867f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:7e:a9:db:35:05:a1:69:7c:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=c865b230-8b6b-4ae5-b4b2-b57b4be4a0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:f2:15:bd:2d:2b:b3:df:be:f2:5f:a7:4b:
a4:db:1f:85:a2:d7:70:9c:68:87:c7:fd:7e:e6:67:
d6:99:1e:c2:0c:4f:09:27:26:d6:56:e7:62:24:4a:
fa:db:17:af:d7:d1:ef:7c:aa:0f:2f:3f:c7:56:f0:
9e:af:84:21:00:2f:d4:1f:f8:f3:de:87:ea:95:99:
af:8c:2a:5e:c2:8b:9b:e9:3a:fe:20:83:ee:70:61:
24:f4:c2:66:bb:ef:2d:37:3f:dc:f1:35:ff:e5:fd:
90:3c:0d:1d:30:b2:54:f9:6e:51:ac:c6:69:18:48:
8d:3b:11:6a:a0:85:2e:a0:f7:a1:30:27:48:37:fc:
5a:6c:24:5b:39:ad:5e:3d:93:95:62:81:53:29:15:
72:4f:21:4d:f7:02:a4:c9:d9:7c:b5:f1:bc:4c:0d:
ee:a2:8e:63:c2:89:05:16:91:b9:79:9d:83:c4:1f:
f9:cb:d7:20:fb:1f:aa:d1:42:1c:15:aa:0f:4e:08:
2f:cf:15:69:28:86:d8:32:55:bc:fe:7f:46:0b:f3:
7f:23:69:60:31:7d:73:48:fe:a6:33:d4:57:4d:37:
11:80:ca:93:c5:6c:03:d7:43:18:c6:46:9f:ae:5f:
9c:c8:62:c9:8a:50:64:bd:b0:4a:d1:0c:56:6c:3c:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:10:E8:3F:FF:6E:3A:D7:42:EE:31:AA:83:50:94:C4:FE:32:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc18e776-039a-3842-a1b2-72b3f78f1a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:867f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:11:87:b2:e7:fd:98:b8:41:2e:55:b9:8f:09:09:80:23:28:
1d:bb:da:36:99:d2:ae:1d:84:76:01:21:c3:97:aa:bd:37:c2:
e9:48:8c:9b:a4:a4:60:e1:ca:84:ce:c2:7f:48:8f:64:d9:03:
72:17:ba:d3:d9:7d:61:79:fa:78:9a:5f:d9:d7:f5:ad:73:23:
9a:f9:b7:bd:d3:58:68:36:9e:9e:3a:c3:5d:0e:3c:22:39:2c:
21:c1:bb:87:87:d2:4b:54:d0:40:94:0c:50:d5:a6:06:4a:c8:
a7:62:63:26:de:43:30:8c:5d:5a:49:c9:07:b2:dd:57:7d:5f:
1e:6f:4e:b9:79:91:a3:5c:27:d5:53:4d:a3:c4:25:39:6f:11:
be:10:81:1e:67:76:ad:be:a2:49:74:ad:88:db:3d:d2:94:b4:
08:bb:07:74:ea:ce:df:9c:0d:87:f8:44:20:47:9e:51:00:a6:
99:8d:aa:34:a4:cf:39:e9:85:c6:d5:76:9a:c9:61:8e:41:9f:
ef:10:22:60:3b:59:d1:73:48:0e:7d:fa:79:5b:90:c9:d3:47:
bb:8b:d7:8c:17:6d:a3:bd:c4:8d:d9:6f:75:83:d7:b1:f9:af:
cc:fe:cd:84:18:13:28:58:89:e9:f6:68:76:1f:fb:45:ce:92:
75:41:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:28:05 2025 by rpki-client