Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa
File: 1c8868f4-548c-3295-82d0-ccb06c6a033a.roa (raw, json)
Hash identifier: 9ESElnehexVBBu5ywKwOBJVvrhcOy+OLKjgOs1ZAmZs=
Subject key identifier: A2:98:37:8B:61:06:93:4B:20:92:1E:E2:F5:B4:3E:38:91:75:0F:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F9B6A20E1D6801E9E2202
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.209.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:9b:6a:20:e1:d6:80:1e:9e:22:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b063b171-1674-475d-92c3-3c8adf1f7ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:97:a9:44:af:ed:c4:8e:57:8f:e7:02:4b:
0c:95:db:f3:28:fc:25:4a:6a:84:13:26:42:fb:33:
1c:5f:d6:7f:39:20:90:93:af:3c:f8:c5:5d:88:21:
6b:15:c4:4e:31:13:d0:22:de:9e:e6:67:c5:14:fc:
20:88:06:e7:74:80:29:e1:eb:bf:65:60:b2:05:c1:
14:88:89:eb:2f:97:02:fa:02:55:17:cf:90:55:2d:
1e:86:e9:4b:d3:16:e3:bd:13:1f:29:e2:6e:a8:ee:
ba:b3:4a:0d:5c:eb:7e:9f:87:04:95:eb:03:80:4b:
db:fb:e0:ff:77:bb:dc:87:33:d6:2a:f5:a7:fa:1b:
85:cf:1d:53:96:cb:82:a8:be:4e:b0:85:5f:8f:9a:
5e:61:50:d1:60:6d:f6:5e:ea:35:c7:b5:59:e4:4d:
bd:3a:46:a6:98:5e:5f:b7:5f:ef:c4:72:53:5e:14:
e1:2e:52:60:03:3b:5c:4c:ab:6e:73:e8:38:b8:1b:
a1:14:b8:f2:7b:c7:b7:9c:76:67:29:1d:6e:06:49:
63:6d:43:9a:64:1d:af:79:68:d3:83:b3:ee:92:59:
22:e5:8c:79:46:61:44:37:be:86:b2:33:cf:3d:f2:
65:7a:fc:16:24:65:a9:df:4d:7f:d5:8a:56:49:ff:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:37:8B:61:06:93:4B:20:92:1E:E2:F5:B4:3E:38:91:75:0F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:0d:68:06:f2:8a:fe:c1:21:cf:dd:ac:58:dd:24:96:f2:42:
55:db:45:c5:84:44:5b:86:77:8b:b1:c9:e4:75:aa:23:b5:36:
83:2e:80:95:42:1d:cc:c7:a2:f6:44:f9:f0:a1:cd:21:21:ec:
01:44:1f:69:66:b3:3c:a3:94:63:26:09:78:a7:ee:5d:6e:60:
6f:13:dd:bf:be:22:8b:97:e9:4c:2a:13:f6:98:fe:1c:6f:08:
18:2d:84:da:f1:31:c9:c1:fa:8c:ee:b3:4d:f9:bf:7e:76:af:
07:d9:2f:5f:94:0f:6c:3c:43:d7:d3:0b:2f:24:03:56:68:87:
00:61:1c:a1:53:fe:1a:8e:66:bf:3c:c9:22:16:4c:e1:0a:50:
41:40:f5:4b:da:12:93:6f:b2:63:6c:a4:71:b8:7b:f9:94:95:
d3:21:08:a9:9c:63:99:c2:8c:4b:8d:24:85:2a:77:aa:52:38:
bf:20:1e:69:6a:f5:84:e3:6d:f5:9f:4f:9b:bc:eb:10:19:bd:
02:1b:1f:9c:52:19:67:c9:f3:10:f1:ae:c7:06:4a:48:fc:c3:
fa:59:87:c5:49:dd:54:8a:30:12:37:31:56:ac:56:d8:c1:9e:
0f:a4:a0:a9:cd:02:ba:c5:e6:d3:d6:89:4b:28:10:d4:69:1d:
7f:3a:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:49 2025 by rpki-client