Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248285-92aa-3521-a438-a0834dda9d09.roa
File: 0c248285-92aa-3521-a438-a0834dda9d09.roa (raw, json)
Hash identifier: 9mSFMRj+lbmwrQC203WhDrBQb1Evzb2Dd1rNXn53vQQ=
Subject key identifier: 44:88:7C:1E:85:63:D7:85:C9:E5:2A:B4:C6:62:2A:B5:F0:66:F3:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C114C28D640330FC0FA5100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248285-92aa-3521-a438-a0834dda9d09.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.212.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:4c:28:d6:40:33:0f:c0:fa:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=66472903-f54c-4a2d-a975-ab155645864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:58:5d:fe:1c:55:98:78:a5:96:e0:12:8c:
bd:ca:dd:a3:cb:96:b0:00:a6:40:c5:23:41:6e:92:
fc:e0:69:6d:7e:6e:50:ba:bf:fb:44:31:04:25:59:
ee:06:c8:8e:c4:bd:d0:93:10:06:f6:26:3e:f5:b7:
5b:1f:d1:61:66:0c:1b:4f:9a:74:fb:d2:f5:ee:36:
c1:83:76:34:bb:9a:ca:b6:2a:c8:83:80:f1:1e:dd:
81:ab:28:c3:f6:51:61:1a:82:bf:32:6f:46:5e:92:
c5:e8:11:09:e2:49:c7:80:87:19:36:d0:af:39:ff:
82:a7:7b:3b:04:d5:46:b8:0e:77:7a:84:76:72:3e:
b4:90:ae:16:68:a2:2d:da:fa:55:6f:da:db:41:25:
86:1a:1a:fe:9f:46:4d:ec:e1:e2:e7:54:96:22:71:
04:a3:44:bd:57:a6:c9:40:01:96:bf:db:c0:51:50:
37:9f:69:b9:d3:09:7c:76:5b:84:39:e4:1c:2d:a8:
a8:ae:9b:3c:bd:11:59:ce:0d:8e:67:e9:0b:9c:8e:
41:a8:e4:15:d2:ff:63:65:23:0b:f8:46:18:4b:e8:
0f:47:f7:39:99:6e:83:57:81:7e:04:0c:b0:88:fe:
16:40:77:e1:c2:ac:5e:fa:5e:0f:e7:17:62:df:89:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:7C:1E:85:63:D7:85:C9:E5:2A:B4:C6:62:2A:B5:F0:66:F3:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248285-92aa-3521-a438-a0834dda9d09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:9e:a8:06:d8:d4:05:f2:ea:5e:73:d9:8b:9c:4a:32:6d:ac:
bd:75:72:d1:98:b2:a8:48:ed:89:db:92:23:f0:87:1c:8b:08:
dc:17:bd:14:74:b2:b5:f8:0c:35:76:d7:e2:d6:57:6b:c8:2a:
d7:ef:e5:08:ac:98:15:d6:2f:a4:0c:34:2d:1b:c9:42:ee:15:
a4:43:05:a1:b7:6e:2b:fb:2b:78:47:f0:64:93:66:f9:e3:0d:
71:78:e3:cf:6e:d3:2f:42:d9:35:39:2e:8a:3f:f3:47:4e:1f:
bb:e5:29:10:fd:19:49:51:fa:92:d0:7e:a9:79:fb:7d:8f:08:
6f:51:e5:c0:af:6e:50:70:a2:82:1c:fe:fb:e7:03:4f:52:db:
d0:0e:35:0b:c5:1d:d3:13:61:b0:a3:b0:7c:88:d7:dd:74:9e:
27:ee:b5:ee:88:a0:e6:b0:5f:fc:ab:ed:78:dc:f3:15:d3:ff:
30:70:9e:ec:1c:d7:d7:3f:8a:6b:02:c6:89:79:f8:ba:bb:9f:
db:85:8a:03:e3:44:10:80:16:22:83:18:d3:57:64:17:2b:f4:
2c:24:36:3a:10:fb:3f:3b:48:cd:8a:37:9e:ae:8c:13:79:ac:
d5:d7:ef:ee:c3:fa:0c:e6:23:ba:d0:05:3e:a5:1f:b4:e3:0c:
90:af:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:11 2025 by rpki-client