Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa
File: 28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa (raw, json)
Hash identifier: iRb5i5kG/KIr9rpXrNT1aM1SayUADE20gdhSspB1UnA=
Subject key identifier: 11:86:42:F8:AA:03:75:E8:C8:FB:2D:AF:14:CE:EE:4C:82:24:D4:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FA59ABF687EE36712F340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.243.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:a5:9a:bf:68:7e:e3:67:12:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8c957b5d-c6c9-44a8-b7c9-d67dd1f4174d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:2d:23:49:1b:f4:e7:7a:dd:ee:95:29:3f:
0f:44:67:97:9a:7c:e2:a7:6b:78:8b:f5:88:2c:48:
1b:51:67:8f:cd:a0:65:dc:ea:66:5f:bf:fd:7c:d1:
4c:8d:3a:0d:79:ee:80:19:ce:ad:5a:9c:e4:6e:39:
37:28:05:e7:96:f3:ba:71:d5:4f:9f:67:91:7a:b5:
86:8f:b3:3f:cf:4e:27:d0:23:f1:4c:a4:27:f7:83:
98:b1:6d:52:36:f8:e0:5f:1f:ad:85:bb:18:e7:6d:
10:14:2f:28:c5:8a:e1:26:10:4f:5e:61:04:42:bc:
ee:e1:62:7e:4b:8e:a7:c7:82:b5:21:ea:d7:ca:7d:
6b:e6:8c:f2:39:4c:0c:59:36:54:40:74:ab:6d:3b:
82:64:16:87:6d:01:85:d4:c0:8d:2f:29:49:80:c2:
da:57:18:38:d8:e0:52:69:f3:98:b5:cc:21:ef:9e:
fd:ae:88:38:a6:43:6a:5f:77:2d:51:18:ed:50:28:
21:a7:d9:8b:10:ba:a5:20:e4:c5:f6:64:af:06:f8:
26:20:d0:7a:76:64:cd:e4:e9:3c:24:55:43:e0:e3:
40:31:5e:e9:ba:7d:10:cd:27:a0:a1:3b:97:cb:2e:
55:db:a0:be:9c:e7:01:fd:2b:48:96:f3:13:10:ba:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:42:F8:AA:03:75:E8:C8:FB:2D:AF:14:CE:EE:4C:82:24:D4:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.243.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:72:5b:80:27:2e:e1:25:da:9b:db:dc:0e:19:19:ee:7b:7c:
91:90:e3:da:0a:e8:64:c0:dd:ea:e3:19:c4:8c:10:ac:cc:ca:
dc:6d:90:a8:e8:ae:40:6c:9d:60:ac:8e:99:23:10:d1:e7:6e:
9a:93:f3:0e:c8:9b:9b:80:3e:22:9d:38:a7:a4:2c:cf:cf:67:
43:9a:33:14:2d:42:87:18:f0:86:f4:b5:06:7c:f5:1a:4b:7f:
a7:01:3a:b1:49:5a:53:33:41:07:7a:7c:7d:64:2d:a9:77:4f:
96:a4:29:d8:dd:91:ef:51:3a:37:e6:66:16:1a:a1:5e:54:e7:
b8:48:f3:ca:54:f5:4e:70:fd:cd:4e:e3:82:60:6a:b6:5d:e4:
ac:1b:c8:1e:42:e7:70:63:65:81:d3:80:38:a1:8f:7d:ae:19:
34:0b:77:f7:3b:2d:8e:d7:0e:92:53:28:5a:5c:1d:49:44:d6:
19:ba:e4:f3:37:61:33:a4:ef:a7:f4:61:9f:bb:d0:4c:84:1d:
9a:fc:d7:64:c5:dd:80:08:91:1b:3e:c9:98:a4:4b:c5:72:15:
6b:00:4c:f5:86:8d:f2:e1:b8:5a:6c:90:71:9c:9c:07:85:35:
69:94:bf:0f:8a:3b:63:b6:4f:0a:ff:ba:89:9f:2e:cd:a5:36:
1e:02:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:52 2025 by rpki-client