Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1531cb78-e830-3b2e-912c-72136b0a21c5.roa
File: 1531cb78-e830-3b2e-912c-72136b0a21c5.roa (raw, json)
Hash identifier: OS7NVoF5uypC0FNWR3yWt0TFv21MAQsw0ZPAMoViTuo=
Subject key identifier: 40:5B:75:AF:2B:6F:10:DC:5F:8F:17:90:6A:D5:69:90:57:2A:66:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EE12F18AFC21A1A4BA800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1531cb78-e830-3b2e-912c-72136b0a21c5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 98.217.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:e1:2f:18:af:c2:1a:1a:4b:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=dd66e344-6bde-4631-b04f-c0564da89686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:1a:a9:91:c1:a3:44:93:b7:5b:d7:c8:65:
68:6f:a3:11:74:85:8d:db:ee:05:61:03:cd:18:e4:
4e:d9:8d:4d:92:93:38:0a:0e:2a:b7:ee:a9:15:36:
93:71:1e:7a:ed:f5:56:90:b3:b1:6f:77:b7:47:0e:
99:1f:1e:10:85:b8:b6:fb:a8:37:b3:d4:78:2b:bc:
29:49:31:99:a9:07:f9:dc:28:41:97:71:53:30:b8:
e1:d5:e6:d2:d5:57:e9:c4:15:8e:06:f7:ef:e0:a9:
76:d7:3d:d0:d3:52:9c:99:d3:0d:de:04:11:1a:c9:
06:6a:3b:ef:d0:7d:ef:67:73:be:bd:00:f4:8e:44:
e9:43:06:7f:65:e2:e5:a9:32:a9:18:b1:1a:55:3a:
e2:15:7b:88:b2:27:18:85:82:6f:e2:0c:c1:26:d4:
e4:05:a0:9b:a3:7c:06:ff:45:9d:0b:4a:df:58:30:
b6:ed:0d:03:ca:09:88:49:94:2b:c6:82:1b:ee:6f:
a7:15:31:52:8a:b0:da:d1:9e:b1:71:7f:7e:03:dd:
56:97:2e:e6:35:10:7c:87:f4:a3:60:21:3e:ee:fa:
93:17:f2:a6:14:a0:09:7f:f6:e4:b5:c6:e0:c6:85:
15:e8:71:c5:a9:74:ac:36:7e:ee:80:5c:18:0f:d9:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:75:AF:2B:6F:10:DC:5F:8F:17:90:6A:D5:69:90:57:2A:66:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1531cb78-e830-3b2e-912c-72136b0a21c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.217.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:4a:fd:21:0f:14:0d:b9:be:06:c7:97:bf:71:5f:22:b0:41:
89:0c:e9:73:21:d8:d0:e9:c3:12:58:6a:91:39:c6:7d:91:56:
cb:42:23:a0:c3:9d:2b:f8:56:d9:f6:77:65:fd:0a:9d:56:3c:
22:1d:65:36:0f:2c:da:71:1e:59:b9:0a:68:6a:65:15:27:c6:
0d:a7:50:aa:ce:d3:4e:65:84:83:da:36:ec:5f:d2:7f:a1:2d:
85:58:14:f8:c2:74:bb:04:60:83:93:89:58:1f:d5:01:7d:04:
ab:51:bf:02:1d:0f:65:c1:6c:14:eb:29:47:09:9b:04:55:c7:
d5:b8:f8:85:5f:06:63:ef:25:dc:98:ad:cb:f2:db:be:73:5b:
3c:9c:47:9f:f6:22:15:75:b3:e3:de:cf:b7:a6:a2:0c:86:22:
7c:09:a5:e6:06:e2:e4:43:b3:0e:b8:39:30:6e:f7:30:63:8d:
5b:76:52:1b:ed:5d:91:71:23:46:54:d5:9e:7d:04:d1:0e:4e:
27:79:7a:77:0e:26:6b:ea:cd:5b:9b:25:3c:8b:f0:90:b3:fe:
c1:36:29:c8:38:c2:29:77:cf:96:23:34:7b:1d:e7:5c:0d:76:
0e:9c:49:10:a7:76:7a:8b:4f:a3:59:39:1a:89:fb:3a:36:6b:
39:4a:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:26 2025 by rpki-client