Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f529a1f-0f6d-3af7-95ee-2a6dc49c6f71.roa
File: 0f529a1f-0f6d-3af7-95ee-2a6dc49c6f71.roa (raw, json)
Hash identifier: gxUCmXMA1wc0AG6yWcSn/L9pR0yIFK91Z90h0DKVi7A=
Subject key identifier: 70:C9:15:ED:FE:58:67:66:88:A1:6E:EB:E8:0B:0C:7D:FF:0E:2B:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C153799E4AAE504C2462F38
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f529a1f-0f6d-3af7-95ee-2a6dc49c6f71.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.42.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:37:99:e4:aa:e5:04:c2:46:2f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=71f54a13-c888-46f3-af6c-8ea1b1e7757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:eb:c1:98:54:51:72:92:1e:2d:76:bd:f2:
55:dd:06:df:bd:4f:9f:1f:d7:57:41:1b:32:6f:d3:
4c:86:b0:b2:9c:57:e9:75:5f:cd:5f:10:0d:9c:09:
e4:78:4a:7a:0e:82:dc:1d:f1:42:36:cc:80:30:c9:
a0:1d:49:2c:15:d4:3f:96:1e:87:0b:16:c3:ba:cb:
92:2c:e1:12:68:62:3b:99:d3:62:bb:52:86:d6:63:
07:cb:e9:07:da:a0:a8:2d:fc:2e:ff:59:5c:32:2f:
87:5b:06:50:0c:94:bf:c5:7a:af:d3:fc:75:55:dc:
a3:a2:1a:bc:e2:e3:86:06:ad:77:74:b4:b9:05:9c:
b6:49:0f:32:54:e7:41:f1:71:f2:d2:b3:24:93:4e:
44:dc:f2:34:32:3f:09:56:b9:05:f8:c3:74:05:5e:
ab:86:b8:86:59:d3:9d:69:78:98:c5:34:5a:bb:7d:
91:2b:fa:ee:6d:d0:8f:ab:d5:1a:dc:16:5f:fd:11:
f1:42:77:10:06:b1:99:ca:9f:eb:bf:50:1a:4f:64:
a2:04:92:88:dd:a9:7a:08:ba:74:16:43:6e:3c:7d:
b6:1d:f3:07:31:9b:7b:09:ab:81:74:f9:37:0d:b0:
8d:e2:16:45:09:76:9f:81:10:4e:05:54:2a:67:75:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:15:ED:FE:58:67:66:88:A1:6E:EB:E8:0B:0C:7D:FF:0E:2B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f529a1f-0f6d-3af7-95ee-2a6dc49c6f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:78:3f:cb:2b:a9:aa:b9:34:ca:f3:e3:05:92:08:2b:0c:1e:
56:42:05:55:9b:f3:0b:f9:1d:7b:b4:ad:c6:4f:5b:2a:d1:93:
c1:f8:b8:5d:55:07:fb:e1:d2:87:38:b5:df:6c:ae:4a:b0:46:
4c:0d:19:f6:d1:12:32:7f:f6:e5:82:ae:e9:04:59:90:dc:e5:
08:b9:2e:f9:9d:02:4a:b1:0a:36:3b:65:e8:46:76:7f:bb:c5:
78:81:ae:3f:ee:d9:19:a0:dd:f4:df:7a:f5:08:e4:fd:33:d1:
4f:54:f1:01:19:0d:c8:3a:f9:b6:6c:6b:0d:60:e5:04:17:21:
62:ad:9c:2f:75:3d:df:48:ff:6a:c7:49:7a:27:f8:bb:c4:ff:
c9:56:26:71:f2:35:bb:d5:d4:f2:a0:d1:13:4b:02:17:d4:d9:
74:4c:89:ab:f1:da:e3:7d:cd:f4:98:73:1a:7c:27:62:de:24:
52:20:a5:a9:55:b9:df:be:36:5e:1a:1f:4c:81:6a:7a:62:8b:
56:a5:5a:7c:d3:e5:ee:32:24:13:6e:71:20:fb:24:15:a2:42:
99:a6:cf:aa:21:7e:72:d2:62:4d:eb:49:9e:5e:bb:88:1e:96:
14:d9:7e:69:3f:f5:70:d7:ba:ad:b7:6c:d3:00:fb:67:34:52:
ac:7f:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:38 2025 by rpki-client