Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0152b678-7622-3d63-9146-9c70d1294927.roa
File: 0152b678-7622-3d63-9146-9c70d1294927.roa (raw, json)
Hash identifier: xEdRGe2t45cS9ylt0EDjFagLuSNZeVLqHu3yIqdUbvs=
Subject key identifier: B4:48:04:4D:86:7F:32:BD:35:45:1D:90:5B:59:70:69:3B:9C:4F:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1521200E5E3788A19E4E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0152b678-7622-3d63-9146-9c70d1294927.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.35.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:21:20:0e:5e:37:88:a1:9e:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=989e752d-a638-4e6b-97a1-d9e96e63e715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:b3:0b:22:84:be:29:96:a2:21:26:b2:2e:
24:43:a7:05:24:bd:3f:de:2d:f5:48:ba:66:ef:a9:
bf:8f:7b:fe:15:2b:b7:cc:c3:b2:46:ff:c2:93:cc:
7d:8c:52:20:77:38:23:28:b3:d2:16:b5:5f:d6:37:
64:51:f3:fb:45:f7:42:fd:09:cc:cf:c9:7c:3b:72:
b5:c8:e5:6e:29:73:da:d4:13:46:08:74:91:2e:fb:
ed:83:8d:4c:74:00:49:6b:bb:e1:0f:70:44:de:ef:
d5:e3:51:80:e4:9d:d5:6a:26:ce:c6:59:97:20:82:
2e:cb:b8:59:8b:9d:84:69:81:70:37:0b:45:7e:66:
43:9b:57:b7:b5:d6:ec:20:d4:29:4e:07:f6:58:31:
47:2f:d5:b4:45:70:e9:88:f1:98:87:08:b1:24:e6:
a3:d2:38:80:ff:a7:6b:30:d3:ec:fc:c5:34:a1:81:
39:a0:2c:3b:46:d5:a2:f7:22:fc:5d:b5:f2:dd:da:
53:5e:e2:27:8d:bb:db:b8:6c:f7:ea:45:9c:e8:ab:
5d:b4:6d:ff:ab:be:5d:30:df:da:11:19:0c:76:44:
55:fd:99:9f:31:30:1b:db:a9:72:44:eb:b5:b3:54:
bc:89:97:15:c0:99:4e:ec:fc:ad:db:f4:b4:1a:df:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:04:4D:86:7F:32:BD:35:45:1D:90:5B:59:70:69:3B:9C:4F:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0152b678-7622-3d63-9146-9c70d1294927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.35.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:c4:26:bd:11:32:0c:20:dd:a3:fc:8e:c4:a5:67:5f:ea:3a:
f7:47:56:12:d6:e8:08:0a:f9:45:93:f8:26:d5:f4:dd:da:93:
0d:34:d5:0c:f3:03:88:8e:de:1c:99:49:79:c3:cb:8b:b6:cc:
95:8e:ed:b4:0e:79:80:f8:63:07:77:9d:01:96:e9:db:20:0c:
ee:6c:f0:e4:65:b2:d2:d2:51:46:1b:41:19:7d:31:b9:b2:ce:
ba:34:59:45:c2:e2:30:7c:cc:dc:ac:66:5f:dc:4f:19:88:67:
3c:b5:3b:de:0e:28:a2:5c:e4:42:3e:12:92:67:90:f1:e2:41:
31:e0:ee:16:bf:a5:a8:55:1d:13:ea:69:0b:02:bf:48:cf:a8:
7a:c3:7a:ec:33:3d:e6:98:17:0d:17:d5:da:93:86:c4:51:2d:
df:26:03:fe:54:9a:05:07:b2:7e:c6:d2:04:55:43:f9:b3:02:
cc:23:79:fa:c4:70:37:24:40:2e:42:0d:59:e5:bd:19:15:77:
b5:b3:08:2e:b9:af:2a:cb:26:df:d0:fa:11:07:8b:01:f4:5c:
31:1d:c6:83:0e:21:d1:2c:cf:63:e5:ab:06:03:fe:1c:26:e0:
0f:8c:32:bd:30:d8:53:96:7e:c3:80:56:80:1f:c2:73:9a:d5:
88:45:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:46 2025 by rpki-client