Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a975bc-3333-3aa9-bcad-3d009926ea66.roa
File: d4a975bc-3333-3aa9-bcad-3d009926ea66.roa (raw, json)
Hash identifier: ERJAW6JSkkRsgIkzCM0/T9chb62q7mfH3PfyQ30gm20=
Subject key identifier: 42:A4:9A:5C:8C:BA:5A:DB:C5:B5:7F:40:9A:4F:A1:C5:95:9C:A9:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D31F6FD60BBA50D5D8480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a975bc-3333-3aa9-bcad-3d009926ea66.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 2001:559:362::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:31:f6:fd:60:bb:a5:0d:5d:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=e0bad873-0951-47c9-9f92-435cb1143349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:09:6e:45:f1:da:ce:64:51:a6:eb:c6:48:
f0:7b:bc:9f:b0:0c:c3:44:21:5a:aa:96:17:29:66:
31:86:ba:dc:88:c9:91:66:8d:08:3d:7c:8a:a6:55:
f9:ec:ff:02:87:48:69:d8:c8:a2:14:73:40:30:05:
0e:a3:bc:36:3d:4c:76:00:a2:fa:d8:73:d8:30:53:
54:ef:62:30:d8:c9:00:d5:05:c1:76:3c:1a:3f:92:
8a:61:53:a8:48:83:3e:6c:fb:d4:d0:60:16:11:d7:
88:3f:21:bd:94:b6:9e:78:a4:46:69:d6:50:4e:e4:
73:50:9e:c1:5d:49:2b:ac:56:f4:35:67:b5:56:a7:
9b:33:b7:71:7d:68:67:0a:02:78:e7:59:25:bc:a6:
70:21:6e:0a:64:0f:a3:06:1d:db:55:65:67:14:fd:
51:7f:f1:c7:bb:99:ca:53:3e:05:0a:30:eb:44:c3:
b7:3d:9f:cb:2d:c0:ab:d6:6e:01:ab:a8:1b:bc:52:
20:3f:7a:cf:bd:6e:12:ef:37:a1:b1:e1:44:78:d9:
2d:2c:33:4c:c7:ac:d6:69:52:e1:de:4d:ae:63:7d:
12:8e:e0:53:4d:72:74:bf:66:0f:7f:43:d3:d4:fc:
37:b7:3c:f1:ee:29:a4:6c:d0:ea:54:e7:50:39:e4:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:9A:5C:8C:BA:5A:DB:C5:B5:7F:40:9A:4F:A1:C5:95:9C:A9:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a975bc-3333-3aa9-bcad-3d009926ea66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:362::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:42:7b:31:3f:27:3c:2e:1c:8b:0a:2f:49:d4:0c:ae:99:25:
34:0a:96:9b:aa:e1:ee:85:5a:f7:c1:f2:32:b2:4e:93:4e:e5:
9f:af:7e:e7:bd:29:4e:4d:12:b9:32:ab:10:04:ec:fb:aa:95:
d6:1e:9e:7f:61:f2:75:80:5e:61:5b:0b:da:54:e3:4f:80:af:
ea:db:29:8a:3f:1b:7d:f6:3f:94:94:98:ef:fb:5d:96:96:72:
66:e0:06:d6:37:42:e9:ef:6b:64:8b:02:73:27:80:c2:d7:ac:
24:ab:2a:4e:3d:5b:c4:bf:79:31:7c:df:f8:c5:34:9b:71:96:
ab:81:35:05:e9:fb:cf:47:c3:b7:91:05:78:e3:7f:b7:c8:98:
81:8d:60:6d:8f:a8:30:15:94:73:31:58:7b:8c:cd:aa:de:91:
87:0f:80:eb:22:42:c6:3d:ce:ad:94:ca:dd:b7:f3:98:89:9d:
51:d9:2c:18:a6:64:eb:50:84:e8:d1:67:29:5b:21:fa:80:4c:
20:d4:22:e8:e0:54:c4:87:3f:2f:65:9f:5e:13:d2:16:a3:31:
e5:30:19:39:cf:29:0d:42:b3:ff:2e:2e:7f:38:60:ce:bb:f0:
57:83:86:e2:28:a6:ac:59:d2:fa:0a:26:1d:61:d6:e7:4f:c9:
50:99:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:57 2025 by rpki-client