Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebe2a70b-daba-3526-a3a0-14775e2f1a4b.roa
File: ebe2a70b-daba-3526-a3a0-14775e2f1a4b.roa (raw, json)
Hash identifier: dfbF5iSxUFzFkaebzZjc8nBELMQX1c9N0e/YCnZ1X/g=
Subject key identifier: EB:33:36:68:F7:0C:C2:80:F2:DE:C4:76:E1:0D:8D:B0:56:37:1B:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD5AE8BCBFAA7A1E10380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebe2a70b-daba-3526-a3a0-14775e2f1a4b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 2001:559:815b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d5:ae:8b:cb:fa:a7:a1:e1:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=b875ef35-3820-437a-95c0-709aaec67089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:8b:b2:7e:41:3b:7e:bd:73:38:74:04:2f:
29:de:d2:53:0e:dc:70:da:92:9f:51:d3:a3:68:0f:
1d:b5:bc:60:c1:4b:8c:46:1d:8d:6b:27:8f:01:78:
87:d9:d1:3f:a2:3d:66:7e:4f:b8:6e:8c:21:25:84:
40:8e:b4:7a:27:a5:e6:7d:cf:cf:9c:1a:ae:a1:3c:
4c:13:4b:1c:90:20:0f:70:96:b6:f4:89:d9:7d:67:
0c:86:c7:62:f0:0f:12:10:af:af:84:cc:ac:9b:1f:
24:45:76:f7:3b:dc:be:e0:2c:46:3f:89:d3:d7:eb:
0d:47:31:fd:42:67:bf:04:dd:71:f1:de:5d:7a:dd:
e5:9f:9f:93:34:18:cd:9a:46:25:7f:6f:02:a6:2a:
db:d3:4d:51:5c:e4:1e:74:cc:35:87:ea:ae:43:9a:
18:81:65:16:73:05:87:6d:59:06:da:2b:53:43:c7:
1f:33:da:fa:3c:24:b9:d6:68:b2:ef:5c:5f:52:14:
bf:58:48:c1:03:97:79:e4:42:2c:69:2b:97:0c:e1:
aa:79:e6:da:77:a9:20:22:d6:a6:22:ad:16:42:68:
e2:6c:94:7c:37:23:39:58:66:dc:45:96:41:32:69:
73:82:4c:eb:ec:27:bc:0d:fc:37:33:9a:6c:ba:41:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:36:68:F7:0C:C2:80:F2:DE:C4:76:E1:0D:8D:B0:56:37:1B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebe2a70b-daba-3526-a3a0-14775e2f1a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:815b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:43:39:fb:1b:1e:33:81:98:e2:03:02:7a:c3:e5:20:c1:76:
85:bb:b8:e7:fa:ec:33:65:b4:6a:0e:37:43:7c:39:aa:f5:d6:
ad:cf:ba:f4:af:d7:72:a4:dd:71:b4:e3:30:57:4b:3f:70:c6:
c9:a0:eb:b1:95:7d:86:26:e6:87:3d:08:73:5e:f8:3a:45:14:
ea:0c:7b:59:5f:27:b6:86:ff:ba:41:00:1a:53:64:c9:24:e2:
78:0f:89:ef:1f:71:04:da:55:f1:5e:b8:f8:1a:ef:0a:50:c5:
f1:5e:e8:c7:f7:ef:aa:5c:2e:f2:53:a0:5b:a9:93:1e:5f:39:
2b:06:7b:79:cc:19:53:44:f9:a1:4d:bd:d7:95:a9:da:0c:20:
25:d3:20:e1:4e:20:4c:33:5d:04:90:ef:33:1e:a8:a6:d2:cc:
78:40:4e:7b:15:92:63:0e:1f:36:d0:c1:19:4f:a0:f2:bf:fa:
91:fc:09:29:78:21:6c:02:91:3a:c2:ed:8e:16:f0:86:4c:8f:
c5:6e:8c:0b:3c:46:1d:da:24:19:a3:57:bc:76:3b:d1:a0:99:
ef:90:ab:8a:bb:e5:c2:11:9f:f0:8d:d5:6f:2f:09:29:42:4f:
80:d9:7e:d0:b0:f9:26:c9:bf:1b:ee:3d:8c:fb:4a:0e:5a:a5:
7d:2b:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:30 2025 by rpki-client