Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14a939db-bc91-3de3-9016-8b1b4a3c4a83.roa
File: 14a939db-bc91-3de3-9016-8b1b4a3c4a83.roa (raw, json)
Hash identifier: 7vyAbaF9O6wl1AMZrl/vInf+eZwIx0E6dkEUbgIohwM=
Subject key identifier: 60:55:CF:20:ED:57:F1:2A:73:CB:B6:51:B1:9E:E6:24:B5:3A:5F:70
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C15124E68258F66513703A6
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14a939db-bc91-3de3-9016-8b1b4a3c4a83.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.33.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:12:4e:68:25:8f:66:51:37:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=84167ded-234c-4940-a837-20f4528ba747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:76:20:d6:81:42:5b:c8:f0:51:33:e5:52:
69:38:46:27:cb:98:c4:39:59:61:05:de:1d:25:48:
ff:98:64:98:5d:4d:ad:41:03:e6:84:39:0f:ed:75:
66:74:5b:09:57:61:96:c9:8f:2e:ca:f4:b0:35:8f:
ce:e3:71:1e:96:46:29:1f:77:82:4a:e2:73:a9:96:
01:9e:9c:62:dc:a3:66:ec:40:a8:17:4d:58:97:a1:
50:b1:76:c9:89:33:67:a2:ea:ec:03:27:3e:b0:fa:
35:ff:e2:b2:b1:20:f8:43:1c:a1:ab:cd:3f:e8:6d:
62:dd:92:90:f5:6a:17:60:db:ee:a2:a6:bc:ec:70:
17:d1:b0:d4:57:cc:a3:16:ee:20:0c:ed:1e:20:7d:
0c:c6:fb:01:b8:20:80:0a:72:e0:06:46:94:30:af:
97:d3:0e:29:33:84:8f:52:39:b9:2c:3f:20:76:1f:
36:c3:cd:e0:40:be:48:96:64:ed:ee:58:0e:06:95:
ae:7d:fe:99:00:5f:55:40:93:82:0a:d9:f8:39:8d:
20:31:f5:8d:63:8d:8b:34:c0:f3:bf:75:dd:b9:30:
10:4e:1e:60:fa:39:04:df:ca:23:28:05:f0:0c:0d:
7e:2a:ab:46:95:5d:30:bc:31:46:bc:12:d3:97:46:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:CF:20:ED:57:F1:2A:73:CB:B6:51:B1:9E:E6:24:B5:3A:5F:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14a939db-bc91-3de3-9016-8b1b4a3c4a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:e2:2d:b4:38:7f:99:c4:ef:b6:87:d0:ec:f3:63:f0:f2:30:
a0:fc:e3:7f:88:ee:08:c4:35:bb:80:99:91:df:ee:19:d6:b1:
72:bf:b2:de:da:82:1a:9b:bc:b3:8c:a9:4d:56:84:7a:9e:68:
b4:02:68:2d:b9:be:fd:35:e9:1a:ff:8d:ad:b0:17:55:bf:16:
f1:aa:b9:0f:d6:17:32:67:6c:83:de:90:90:7e:c4:0c:c8:70:
d2:cd:89:38:32:f6:8f:54:b6:0a:46:e8:01:f3:62:53:d4:42:
9c:67:d4:9a:a3:a9:eb:0a:27:79:85:3b:e9:44:f6:c0:09:7a:
b1:62:44:7a:f3:d7:f7:08:3d:1b:32:83:1d:b9:ba:0d:15:90:
41:81:6f:bf:6b:1d:bf:16:46:fd:b6:a1:3b:ee:43:dc:df:e6:
a6:2d:1c:14:8a:7a:87:d3:4e:6f:4e:b3:13:e7:92:39:1d:24:
22:ff:d8:d0:4e:d1:d3:81:97:a3:e9:12:e2:33:5b:f8:a0:42:
09:20:7a:7a:20:e5:66:c1:41:7b:0c:7b:ef:ad:b8:61:49:74:
09:76:76:05:4b:2e:d0:3c:80:42:f0:f5:9a:95:21:4f:91:66:
4a:af:4d:e0:be:5f:01:f6:cb:91:06:48:55:dc:63:23:f9:2e:
44:d8:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:40 2025 by rpki-client