Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07520e98-c03c-3bca-a89e-0cac45e3453f.roa
File: 07520e98-c03c-3bca-a89e-0cac45e3453f.roa (raw, json)
Hash identifier: cQaz1zmS5fTmwtCVEq21aBZfgqemGygYEIkOpQUp7DQ=
Subject key identifier: 83:06:A8:E8:D4:10:F3:CD:DD:B9:10:6C:0F:9F:EF:F5:CE:10:AA:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EDD7EB646C10D910BD7B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07520e98-c03c-3bca-a89e-0cac45e3453f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 98.216.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:dd:7e:b6:46:c1:0d:91:0b:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=864161cf-ff1e-4be2-a83a-c8b77ed148d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:97:0d:f3:dc:11:a2:8d:c7:61:e7:2c:b9:
59:f0:04:65:b0:e7:3f:38:dd:a1:24:c4:a5:fe:d2:
f4:1a:9f:26:0f:ff:96:1d:05:aa:8a:20:1a:f7:9f:
4e:14:2a:8e:71:e2:8e:b2:29:68:ba:99:55:88:5a:
ad:86:85:8c:bc:bb:91:e8:17:08:66:e4:88:bc:19:
fd:e2:12:14:5b:72:e9:29:71:93:14:2c:15:54:1a:
01:34:9f:35:9f:73:89:a7:2f:05:3b:c2:3b:04:e6:
e8:2a:4e:6e:ea:ec:75:63:e9:00:06:b2:f3:32:3c:
bd:4e:9a:eb:fa:78:b7:e2:60:67:4b:04:50:a7:61:
b4:27:45:a7:8b:65:b3:af:ef:fa:73:00:0a:d3:b2:
cb:74:04:bb:cf:b6:3b:e1:57:df:77:90:f9:9c:2f:
6d:f5:1f:de:59:7b:4d:bb:f6:d7:20:31:d7:6c:39:
90:06:30:3e:fa:0e:28:03:36:8c:cc:89:6c:4b:b9:
cc:21:f1:56:06:63:a0:5a:56:c1:37:80:e3:46:fa:
9f:dc:92:4d:c0:6b:86:82:51:d1:87:8e:50:d3:df:
d0:1e:98:46:15:43:71:c2:42:c8:51:ca:00:89:c8:
f0:ef:e2:45:91:a3:54:c3:79:cd:58:08:51:59:01:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:A8:E8:D4:10:F3:CD:DD:B9:10:6C:0F:9F:EF:F5:CE:10:AA:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07520e98-c03c-3bca-a89e-0cac45e3453f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.216.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:b7:16:c4:f8:12:85:55:df:3d:f5:17:11:63:00:97:e0:bd:
a0:23:29:58:70:a4:dd:51:ee:bc:3b:57:db:db:a7:0a:31:20:
23:16:a8:b8:41:bf:eb:5e:25:b0:96:3a:35:fb:2e:79:d1:56:
49:89:63:6d:28:00:1f:5b:56:c2:59:ad:95:ba:dc:d7:2b:fe:
9f:f3:a1:97:85:a9:47:d4:dd:8a:19:ac:d4:db:44:7b:2a:ff:
8b:a5:cc:a3:4a:5a:b9:fd:2a:0a:4a:9f:32:4b:cb:c0:a0:5e:
f2:6e:83:33:bd:4a:02:fc:9d:1a:7a:c9:10:79:ef:2a:62:92:
ea:11:d0:2f:af:f2:02:bb:61:cf:5e:10:0e:1b:a0:40:fa:92:
11:e5:42:c6:f3:0f:09:61:26:d0:56:e7:e2:55:29:80:f2:4f:
78:52:ce:d2:98:5b:bc:b9:13:8d:5d:8d:f2:69:cb:2d:ed:6b:
4e:3e:e2:c4:ba:ea:38:29:33:a8:77:fa:0f:10:8c:58:8f:7f:
27:db:d5:a6:f3:d8:7c:e4:91:b9:e9:ae:6c:77:15:b3:76:2e:
a1:e1:c6:5c:c6:f7:8e:1f:b2:e8:4a:fe:67:ee:09:77:9b:7f:
d8:f6:5a:69:ae:fe:79:59:01:f7:66:3f:c0:11:41:0a:9f:3c:
8a:34:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:40:57 2025 by rpki-client