Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a601dd7-e36e-3372-aea8-a59bbc90f0ac.roa
File: 0a601dd7-e36e-3372-aea8-a59bbc90f0ac.roa (raw, json)
Hash identifier: 3pa6zKIMf90zpQga016UDEwLSpVsWu77uENih9N0NpY=
Subject key identifier: 50:6A:DD:27:AE:48:7B:3F:6B:CA:DF:67:AC:A3:3E:D5:BA:C1:EC:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B84B111735382DF964C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a601dd7-e36e-3372-aea8-a59bbc90f0ac.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.250.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:84:b1:11:73:53:82:df:96:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a728efff-78df-4c87-a50b-6d4232b59fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:8d:0e:f6:5a:cf:4f:95:2b:e3:63:80:94:
74:6c:2b:c6:a3:c5:e1:a2:77:08:de:64:cf:2e:97:
04:1e:52:12:e5:35:8b:bf:04:9c:8a:fa:e8:5c:91:
c8:e6:88:f5:a2:99:ba:f8:46:dd:ba:94:8a:81:51:
55:ad:c0:1b:4e:c9:bf:e2:6c:4e:03:ce:95:8d:ef:
ce:61:bc:c5:fb:ad:06:91:98:bf:ef:e3:43:dc:14:
9a:69:28:de:1e:67:b7:df:df:8b:a8:50:ac:9b:dc:
c5:cb:d2:ac:01:87:fc:51:4c:f3:ef:6a:54:77:77:
2d:a5:22:86:65:ed:01:50:34:d6:36:46:a8:2a:ba:
39:93:5f:f9:7b:5b:01:1f:f0:80:4a:d6:38:77:81:
de:4f:ee:c2:1e:63:d3:53:43:3f:a7:56:cc:eb:7d:
a0:19:ab:15:a3:a7:66:c9:a0:a3:d6:5b:8d:77:de:
1f:21:c7:3f:0f:77:03:08:7d:dc:b0:76:0e:58:c4:
11:fa:bc:0b:fa:da:96:73:94:5b:08:19:7a:dd:bd:
5f:24:f7:04:34:c3:06:8a:d2:95:b5:83:4a:1a:48:
8a:c1:04:a2:96:b4:a3:81:67:b7:5d:cb:0a:ce:81:
e0:49:6c:2b:e8:d7:d0:b3:c7:e5:88:a1:11:59:4e:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6A:DD:27:AE:48:7B:3F:6B:CA:DF:67:AC:A3:3E:D5:BA:C1:EC:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a601dd7-e36e-3372-aea8-a59bbc90f0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:8e:51:4a:38:bc:b4:3c:ba:26:ea:21:ff:51:a5:0f:40:06:
2d:b1:2f:18:54:a7:0b:63:d1:1b:76:16:f5:82:4c:31:4e:3e:
3a:02:94:e9:75:21:83:8d:66:4a:4b:4f:08:3f:65:c0:33:da:
e4:47:a7:12:ea:7e:2d:4a:25:6a:51:da:3b:89:f7:64:0e:45:
f9:3c:e8:f0:ae:18:9b:e7:a4:ea:1d:67:86:1c:e2:6a:41:52:
fe:d8:89:f4:a7:c1:94:71:53:7d:20:72:01:94:1d:3b:98:a2:
8c:54:d7:10:9b:aa:0d:62:64:ef:ec:f9:ca:15:08:0c:a7:98:
1e:57:73:37:0a:2a:c8:b5:99:c0:0f:03:e2:9a:b3:51:20:2f:
28:84:37:c5:b4:2b:a3:7d:12:38:70:4c:02:a0:65:96:4c:fa:
fb:cc:ed:57:43:8f:2a:97:87:86:4b:d3:43:70:5a:12:1e:a3:
05:ca:fe:dd:2f:b3:8c:3c:52:bf:6b:75:f1:5f:e0:0c:31:34:
6e:1c:58:6e:5c:28:25:f9:6b:cd:9f:db:ab:89:55:97:6f:bd:
0a:89:67:46:8d:97:6d:a0:d1:c5:84:32:15:f6:f1:6d:b8:ac:
58:68:2a:e0:c5:f6:c5:69:5a:8f:64:9f:da:81:6b:eb:be:04:
7c:df:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:10 2025 by rpki-client