Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2cc40-8100-37a5-8504-a05fbde5017d.roa
File: f3e2cc40-8100-37a5-8504-a05fbde5017d.roa (raw, json)
Hash identifier: v13Vd0Y+mMyxsO9fYJ412dYLUM60ijd9dB3EiWenyd8=
Subject key identifier: 1B:C5:96:9C:36:9B:F3:AB:2D:62:8B:9D:35:53:83:8D:C0:78:77:C1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D3519D1D74BAC9CB42CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2cc40-8100-37a5-8504-a05fbde5017d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 2001:559:85f6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:35:19:d1:d7:4b:ac:9c:b4:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d634d5bd-8767-4a2f-926b-13220cc01dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:2c:79:e5:54:03:3a:da:8c:c2:ff:00:f2:
6b:d1:dc:e2:16:97:40:8e:36:11:91:26:25:bf:17:
ab:0f:c8:ac:e8:a5:76:0e:9c:e8:fd:5a:62:21:59:
ec:0a:b5:5e:f0:58:61:8b:7e:6e:13:92:1b:2f:23:
55:eb:1c:50:d7:da:30:92:dc:75:de:df:08:3d:a6:
ee:2d:31:b9:bb:77:e8:01:58:d4:68:41:a4:f9:17:
77:f0:47:d3:ed:4a:ea:40:d5:17:67:70:52:53:b2:
c0:8c:3c:95:15:3d:b0:05:75:cc:71:63:0e:a8:8f:
d8:e7:1e:dc:08:6e:cd:62:1e:46:c4:bf:2c:43:9f:
33:55:72:ba:8a:22:65:bc:31:dc:f5:43:9f:07:60:
7e:3d:b0:61:96:34:10:52:ea:14:8b:e8:64:e3:c4:
95:63:5a:73:3c:cc:35:5f:c6:c3:23:d2:90:1a:c8:
88:d6:be:53:07:af:ce:f7:14:db:39:5c:62:5b:8b:
61:4b:00:04:5c:30:b4:8e:93:09:2a:10:f3:4b:5f:
f7:85:e6:88:3d:36:3d:7f:d9:a4:79:96:d7:bd:77:
6f:a5:40:a8:80:35:6a:74:01:dd:c1:8f:c4:50:c9:
50:5c:89:72:18:30:2a:0c:90:cf:7e:d4:fb:c0:ae:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:96:9C:36:9B:F3:AB:2D:62:8B:9D:35:53:83:8D:C0:78:77:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2cc40-8100-37a5-8504-a05fbde5017d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:85f6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9a:3b:cb:f0:b0:b0:b8:8f:7f:e9:e9:67:72:c6:92:ac:2f:
ed:fd:5d:cf:b9:92:c5:da:99:58:43:ed:cf:39:17:52:af:9d:
34:fd:a2:d0:fc:23:b9:f7:87:4b:43:60:37:98:7e:f6:d8:ab:
89:59:ac:10:93:2a:a8:ff:5b:c2:2b:ec:cc:3a:69:ba:b7:1f:
b4:a5:9e:75:5c:ac:f7:c5:79:2a:b4:10:89:59:5d:cd:60:03:
52:e6:0e:ad:a3:2f:4d:90:8c:a0:98:cc:08:9b:96:aa:f2:ab:
eb:0c:2b:30:fd:c5:46:0d:e3:3d:74:9f:a6:09:86:e0:52:1b:
fa:67:39:1f:ee:6b:fb:b9:6a:72:e6:ef:6d:4b:f2:18:30:fc:
79:71:78:f4:4f:52:7a:2d:9a:6a:79:86:b7:56:db:df:ce:c6:
b4:78:a4:e4:cc:24:7b:31:af:9b:13:d9:89:2a:82:b1:69:c6:
c3:b4:8d:04:b8:3d:56:86:20:36:db:3d:e3:f6:28:95:78:1b:
f4:0f:dd:f5:12:8e:05:52:c6:5f:c5:55:92:01:a1:d1:75:63:
84:b3:2e:d5:1a:9e:46:1f:e2:e5:36:cc:cd:a5:21:f8:42:66:
94:fa:ed:54:c1:df:1f:f0:53:20:de:e6:c8:31:5f:e2:cc:ee:
bf:c1:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:18 2025 by rpki-client