Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/154c8b24-40fe-30fd-8c48-61534286a9a9.roa
File: 154c8b24-40fe-30fd-8c48-61534286a9a9.roa (raw, json)
Hash identifier: tJy/0mtrMnmBd8pZud9elfCUIlPApWZDQ/nek0f1eYg=
Subject key identifier: 67:84:C5:EE:3E:01:30:FC:26:04:DA:3C:3B:5B:CD:FB:B8:E4:95:B6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CAEF561244964C587980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/154c8b24-40fe-30fd-8c48-61534286a9a9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.47.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ca:ef:56:12:44:96:4c:58:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5699ecc7-5ab9-4192-a22e-3a8f16f67922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:c1:0b:4e:28:cf:b1:7d:39:88:05:f6:70:
2f:1e:1c:52:5d:da:bb:44:95:e6:93:48:c6:6a:e0:
00:f1:0f:06:72:5c:ee:4e:fb:ef:79:bc:b6:c9:55:
10:3f:8a:34:8d:da:0b:26:80:80:bb:ee:10:6d:2e:
e6:1a:46:db:70:6f:9a:4a:5e:8f:f7:53:25:d5:24:
17:2e:4e:93:e2:b5:f3:e1:3d:a4:77:43:e9:0e:59:
6f:ac:34:0f:2c:d5:6d:7d:f8:b5:30:59:42:a9:5f:
2e:3f:1a:26:fd:d9:cf:1d:22:ac:cf:f4:c9:4c:62:
d5:6d:de:83:6e:be:7a:a5:db:38:27:4c:e8:c3:a8:
86:be:1b:30:ee:91:36:73:fc:7b:bc:38:b8:4f:f5:
7c:a1:98:d7:a1:c7:20:aa:9b:77:a7:91:87:fc:97:
e4:62:61:cd:77:67:d9:b0:f0:ff:d0:1d:7c:31:01:
80:b3:dd:f4:1e:84:57:f5:39:bf:71:0e:27:f9:4e:
0c:96:f0:8f:32:0a:10:0f:ef:25:ea:26:57:ad:3b:
d3:c5:45:d7:c8:41:b5:43:71:be:5c:b0:75:74:6e:
f4:3c:a7:0e:cf:42:a3:c8:57:aa:f3:49:a7:3d:6d:
09:29:d5:c2:7c:bb:c3:51:1e:7f:cb:bb:22:51:09:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:C5:EE:3E:01:30:FC:26:04:DA:3C:3B:5B:CD:FB:B8:E4:95:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/154c8b24-40fe-30fd-8c48-61534286a9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a5:b2:b0:f1:98:b5:2d:b4:20:2c:8a:a9:1a:2e:3f:6c:62:
53:cf:de:cb:6e:8d:11:7a:8c:3b:46:22:7f:9b:e1:b9:22:c6:
f6:24:17:09:5e:f6:d3:6a:37:94:40:32:46:60:f9:65:55:83:
5c:fc:6b:b3:0e:84:f9:a4:7d:7b:56:15:4e:cc:80:48:c2:5e:
5f:2c:d5:c1:f2:bd:14:29:ea:ca:90:46:b3:13:da:71:cb:08:
da:b1:ae:1e:7e:23:c7:58:cc:80:79:28:63:09:f0:6b:10:97:
29:26:3c:94:52:66:c0:02:cb:22:ed:35:a4:7a:c3:1b:c1:cb:
d5:3e:92:65:50:6b:aa:03:52:81:5b:56:d9:49:7e:9a:4a:31:
8a:74:07:e3:a3:f0:85:67:93:4f:53:de:2e:c6:ae:72:38:12:
37:b4:5c:86:d4:a2:5a:24:32:29:7a:21:8e:db:e5:6d:95:bc:
9c:01:28:17:43:bb:0e:00:cf:55:b1:cc:0d:7b:04:0f:9f:05:
25:8d:84:87:b4:e7:57:59:b4:02:04:6a:12:e0:1d:be:d4:4d:
ba:8f:52:01:9a:6a:57:f7:55:7d:80:b7:49:18:80:81:aa:44:
70:fa:75:88:15:d8:f5:e5:4b:5c:a4:1c:78:a5:ff:90:30:89:
3d:c6:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:33 2025 by rpki-client