Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df02028-06cf-3b21-b23f-2eef51525f41.roa
File: 1df02028-06cf-3b21-b23f-2eef51525f41.roa (raw, json)
Hash identifier: qU5vuhhTRGhmpavzGUEZ40PxmQEnTv5/C5SDCZSxHh0=
Subject key identifier: FA:0D:72:2E:41:39:CF:10:2D:70:0F:AE:BB:75:62:A5:42:E1:0A:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7FE415A8FBBB861BEB60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df02028-06cf-3b21-b23f-2eef51525f41.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.224.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:7f:e4:15:a8:fb:bb:86:1b:eb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8ef6f3c5-828a-47cd-baae-b5a4aefcea1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:bf:99:68:32:ab:80:b7:ed:dc:23:0b:b9:
d6:da:9e:db:e1:a5:6b:aa:db:eb:93:ee:66:6d:31:
6a:12:59:71:cf:f2:fc:ca:c4:4e:58:6d:42:08:ba:
27:fe:43:f0:a8:c2:b5:9e:03:5d:04:2e:08:b7:64:
18:33:06:80:24:f6:d4:c3:64:79:af:f3:f2:00:23:
53:7c:fb:d3:75:dc:59:3c:83:50:47:7a:e9:db:9c:
6a:07:5d:d4:60:55:a8:f1:9f:35:3e:67:6b:61:a8:
76:dd:c6:05:d9:45:6a:cf:8c:8c:15:2b:7b:81:00:
38:5d:df:8d:ce:11:2c:22:45:e3:ad:79:54:50:24:
9f:48:51:5c:b0:b8:7a:1e:4c:72:c6:c5:72:16:6b:
0f:c4:02:8e:67:ff:3e:07:c7:f0:4c:67:3f:8b:01:
96:05:a4:29:13:4e:f3:39:f9:9a:db:0b:6f:7e:b8:
8c:a8:f3:a9:c5:9b:bc:96:58:5d:77:64:47:a8:1c:
ec:fa:1f:61:7d:94:d8:e2:38:e9:34:02:ed:0b:3a:
6f:5a:0d:b6:9a:c0:64:32:a8:d7:16:e7:bd:0e:17:
dc:7a:b9:33:75:79:e0:39:c8:74:4b:c9:e9:54:34:
b9:8b:a0:0e:a0:db:ad:6f:2b:94:fb:24:aa:f8:ac:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:72:2E:41:39:CF:10:2D:70:0F:AE:BB:75:62:A5:42:E1:0A:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df02028-06cf-3b21-b23f-2eef51525f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.224.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:3f:41:ff:ed:28:2a:0d:f3:26:11:19:cf:cf:2b:81:1e:18:
81:6c:e2:4b:5b:b5:20:25:fb:84:27:96:d1:32:91:ba:1d:b0:
5a:e2:eb:94:e0:7f:c4:1e:ee:e3:80:85:9a:54:fc:23:10:f3:
fd:aa:c2:97:d7:d2:39:97:43:97:a7:d0:b7:fd:93:bb:d4:ba:
1b:22:53:c8:f8:aa:65:d8:8a:04:f5:0e:80:8c:e3:36:67:62:
b5:a0:bd:66:0b:7d:57:74:dc:f4:34:2d:d1:fe:d7:39:24:ff:
af:33:86:b5:35:00:2e:c8:b4:02:b9:16:a2:dd:45:51:2a:c7:
d5:98:78:26:04:fa:fe:41:de:38:80:f1:84:91:dd:30:26:ff:
26:9b:17:ea:bf:4e:db:da:d3:f3:b7:d3:57:82:0f:9d:a8:ab:
fd:24:24:a6:03:b7:13:e9:fd:3b:25:66:83:c7:bd:3a:b1:f2:
5d:df:e4:4a:db:61:8e:a0:29:3b:3d:67:11:dc:c9:44:7b:e1:
47:89:5d:26:b8:f7:49:f8:bb:ea:0b:a4:9e:da:21:c0:5f:6e:
26:b9:77:04:81:7d:63:a7:86:e1:15:48:74:8d:a3:08:b0:76:
72:3a:26:29:bc:3a:49:15:14:15:2d:aa:b2:bb:c0:cc:15:c7:
61:42:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:48 2025 by rpki-client