Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0151d27a-876d-3f73-bd0f-d811297e3495.roa
File: 0151d27a-876d-3f73-bd0f-d811297e3495.roa (raw, json)
Hash identifier: xygW2Fr1icclaJBmdoSe8UqR1laGmRrzsWHMCYZ8lUE=
Subject key identifier: 49:53:23:B7:5B:40:D7:D3:71:A0:9A:A3:3F:99:FC:F9:AE:43:43:5D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7E7ED86A8A83B78EEE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0151d27a-876d-3f73-bd0f-d811297e3495.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.209.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:7e:7e:d8:6a:8a:83:b7:8e:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ddf1b35c-3ad4-4ea3-9031-3c125b11ee9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:eb:f5:e7:db:e9:11:63:77:60:58:b8:b3:
69:d2:0d:6d:61:0c:9b:ae:92:d6:4d:e2:78:5e:a0:
11:d1:b6:40:0f:8b:93:4c:62:28:01:4b:60:fc:af:
94:f8:a2:b1:67:fd:04:2a:fe:ba:d2:08:ae:5c:91:
aa:84:d4:05:8f:ae:7b:43:51:40:26:8f:c7:c5:72:
ca:2c:7f:67:3f:65:52:0d:42:13:f8:cd:e2:0d:b9:
76:58:94:73:8f:43:a7:8d:5e:7d:7e:cf:9c:f3:7e:
eb:49:78:c2:30:20:a0:82:9a:a2:7a:4d:c7:fb:30:
97:5f:50:49:2f:21:69:6e:27:1f:6e:ea:3e:c3:af:
52:6f:4d:38:62:f7:bd:fb:36:5a:a6:d0:ab:99:8d:
bb:7e:e8:aa:49:72:48:ff:25:e1:22:ee:a7:35:76:
b5:64:7c:7d:6b:4f:7a:d9:03:56:56:9e:73:70:96:
7e:83:5c:aa:24:38:5f:70:30:08:0d:9c:9b:f1:a2:
9b:71:0a:4c:8d:fc:04:30:ec:50:22:fa:67:d8:f9:
b7:93:ce:c4:76:07:ce:d2:57:e0:65:8d:f2:b7:91:
9b:95:de:c9:7d:9d:e4:f1:40:74:bf:1b:46:9f:e2:
e0:bb:18:c6:58:91:36:73:ac:3e:85:85:3a:cc:27:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:53:23:B7:5B:40:D7:D3:71:A0:9A:A3:3F:99:FC:F9:AE:43:43:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0151d27a-876d-3f73-bd0f-d811297e3495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:84:55:5a:c5:f5:54:59:d1:80:28:df:79:74:2b:d1:f1:b1:
50:a0:99:fd:59:a0:05:dc:9e:82:a6:85:47:b4:0e:52:02:0f:
cc:6d:e7:01:bd:b5:9f:24:07:db:fc:e8:54:23:29:61:74:cf:
79:bb:99:be:09:96:f1:48:36:0b:89:de:80:d2:ea:98:49:f2:
6c:34:9d:65:9d:2b:a0:fc:c2:e8:f4:d2:16:2a:fb:d3:2e:c3:
48:ab:eb:08:c2:43:fd:96:c6:66:1e:09:c7:ac:f0:e7:76:1f:
b4:14:58:bb:51:76:42:dd:8d:61:d4:c2:ca:1a:f5:35:ac:da:
30:7c:69:86:7e:29:c1:bf:b9:68:ed:6e:ab:1c:39:25:15:bc:
57:a1:2b:51:47:6b:36:20:10:3b:41:75:a9:05:15:09:54:c4:
ad:15:7f:ba:91:dc:42:dc:7e:ed:ad:2b:ff:37:05:3a:10:58:
79:29:e9:40:29:14:61:8b:16:10:ee:25:3e:86:82:17:cc:a7:
f1:46:8c:c8:85:f1:66:df:c2:a3:26:bf:30:e6:e5:46:af:6f:
55:11:65:6b:4f:03:b8:c2:75:4a:b6:a9:7b:6e:18:b4:a1:60:
0d:c9:3b:5e:aa:31:16:fe:2a:c4:dc:a1:41:c1:ed:59:31:86:
26:40:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:26 2025 by rpki-client