Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cebd4b05-4a8d-32ee-b27c-89556b3a1795.roa
File: cebd4b05-4a8d-32ee-b27c-89556b3a1795.roa (raw, json)
Hash identifier: 6yltNUWdISMvuHCqdXfeA/xQSgXRNXahSH4/kpY1y1Y=
Subject key identifier: 60:3D:43:19:35:4D:06:46:42:11:4F:99:7C:5C:14:B6:9D:D5:A0:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D84480DC99F44DDE62658
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cebd4b05-4a8d-32ee-b27c-89556b3a1795.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33660
IP address blocks: 2001:559:82d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:84:48:0d:c9:9f:44:dd:e6:26:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ae06e569-d30c-42f2-a955-2e3f18741863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:5a:79:53:85:64:19:bd:60:a9:da:e0:ec:
d5:9b:fd:86:97:43:c4:c6:2f:d5:f2:fc:34:f3:b1:
80:96:bf:0e:56:a8:65:f1:2a:df:e0:f4:1b:fe:fd:
2a:7a:62:7d:48:19:6e:41:50:1d:16:df:eb:12:95:
19:a0:7d:fc:6d:25:15:8e:c9:75:ad:13:31:38:ba:
f0:91:06:62:91:ee:c4:4f:6e:c2:f9:c3:99:fd:ec:
3f:4e:3a:8f:3d:a1:0a:74:6b:16:ef:53:e3:2f:ea:
1a:de:aa:46:4c:c8:db:57:b7:02:5c:e0:e6:2a:0c:
a3:c6:76:a1:3d:cd:7a:a5:d8:77:54:ba:48:74:15:
e6:47:4d:22:6d:a1:ba:dc:1c:6d:95:2f:c3:d9:47:
b4:48:40:e9:0e:d2:eb:84:7a:e6:0c:d0:16:1e:2c:
57:4c:1e:09:7a:cf:1d:04:59:c2:3b:98:95:8f:74:
68:a0:29:52:9b:69:b2:29:9d:05:e9:03:76:b2:fb:
bd:5b:31:f8:3f:0a:8f:9d:0d:52:64:4f:80:39:c9:
c8:ff:4b:79:91:5c:77:60:84:a5:e8:ed:50:65:b0:
c6:52:05:74:d4:d1:18:5d:c1:db:01:c9:f6:57:1a:
ae:f2:0b:b0:23:2f:2a:fe:46:9d:d0:73:51:f4:17:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:43:19:35:4D:06:46:42:11:4F:99:7C:5C:14:B6:9D:D5:A0:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cebd4b05-4a8d-32ee-b27c-89556b3a1795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:82d4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:bd:3f:a1:8e:f8:cf:dc:e5:b2:ed:d2:6f:f0:8d:0b:0c:22:
5b:04:5b:3d:6b:87:cd:0b:13:1f:39:18:92:51:26:55:1a:5d:
72:46:99:f1:ed:1d:61:38:f6:83:75:11:11:39:9c:28:72:72:
2f:5a:5f:73:01:3a:3c:aa:2c:b6:ab:f6:fa:c6:86:5b:8d:8b:
88:4d:48:46:e0:b3:00:df:29:85:04:32:4c:d9:cd:f4:a5:cd:
b8:fb:2b:3a:8d:4d:b9:1e:b5:3a:e2:ae:06:36:c7:7f:c5:80:
cb:76:7b:e6:37:c1:49:21:95:02:92:29:67:d4:1d:9a:b1:16:
80:80:b7:80:09:1f:6d:08:2f:03:0f:de:88:a8:36:ea:65:fb:
67:59:0c:8b:1a:63:24:cc:45:5c:9d:ac:08:d9:fa:cd:13:c7:
44:fd:fe:2c:5d:7a:f2:0b:33:f0:17:bc:15:01:ff:be:1d:be:
ed:14:3d:4d:04:7f:2a:64:47:b7:e7:fe:e7:8f:cd:11:88:af:
9e:ea:14:0c:88:7a:91:ee:e0:4c:b8:6b:86:29:7f:d7:94:b7:
82:b8:ec:02:88:bc:fe:f0:dc:57:0a:39:75:12:db:9b:47:86:
25:61:cf:5e:49:56:b6:8d:d6:fd:0a:a1:4a:c9:30:f0:09:b4:
24:93:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:59 2025 by rpki-client