Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d08a3d-7233-3630-8a7c-188a7f52bd0b.roa
File: 34d08a3d-7233-3630-8a7c-188a7f52bd0b.roa (raw, json)
Hash identifier: QS+rEeYQQhdvl+VdAQSrmqYZ1WKU10gCCGR/60HJP9Y=
Subject key identifier: CC:BF:4D:70:F0:AB:87:1B:42:9C:9E:FD:2E:D5:26:16:EE:53:FF:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EE0DF5C6FC0CC25A0F038
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d08a3d-7233-3630-8a7c-188a7f52bd0b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 98.217.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:e0:df:5c:6f:c0:cc:25:a0:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f4f05635-a62a-4c5f-a178-5c99a8715559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1f:da:00:71:47:81:9b:7b:ca:f8:8a:14:1c:
86:7e:e5:31:03:5c:a9:ec:a3:a2:9e:a9:b6:be:d9:
25:52:0a:c0:a0:70:ef:06:bf:27:d0:95:d9:c6:86:
5a:67:55:26:66:1a:c5:68:4c:62:d2:01:a3:1a:7b:
55:df:ee:50:a7:1e:e4:cd:80:e2:a7:e7:84:e9:65:
c4:f9:5c:c1:fe:3e:72:5e:b4:92:8a:0c:f4:ee:69:
ce:0b:37:ae:8e:7f:9e:a9:76:e7:11:ef:17:62:1f:
e1:79:18:30:eb:35:6d:ab:b4:21:32:8b:a9:0d:32:
c8:b6:45:46:f1:33:82:69:68:37:21:88:5a:fe:da:
0c:db:7d:51:7e:f9:f6:ed:52:fe:ba:fe:f2:f6:04:
bb:0f:2d:52:7d:de:57:1f:b2:de:46:06:07:e1:22:
6f:02:74:16:21:7a:c2:80:d6:37:70:c1:c8:2e:3d:
16:78:53:23:10:f4:27:ee:1a:fa:74:70:2f:53:d3:
a8:0a:55:e7:e3:81:92:1e:bb:9b:31:d1:ad:c9:84:
c0:07:f3:56:6c:ae:2e:3d:33:cc:67:fe:e4:60:78:
35:7b:d2:6b:00:29:18:ce:7c:58:55:0a:4b:8c:90:
82:fe:f2:eb:4b:f7:b0:77:66:45:5b:39:2f:7b:6b:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:4D:70:F0:AB:87:1B:42:9C:9E:FD:2E:D5:26:16:EE:53:FF:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d08a3d-7233-3630-8a7c-188a7f52bd0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.217.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:9b:de:8e:87:f1:27:4a:ea:1d:b9:73:77:e1:6d:59:11:2a:
ba:9f:62:76:d7:5d:24:7c:f3:a6:f0:6c:5c:06:83:e8:f5:84:
81:63:cb:30:8a:03:f7:3f:21:5d:d3:ae:3b:0a:a7:c7:96:7c:
1e:d8:cd:22:a7:7d:97:a5:9b:46:cf:70:45:29:7c:16:74:1e:
5d:0c:5b:35:00:a2:f9:19:39:c6:38:66:40:80:20:00:7a:5d:
73:bf:f2:d3:68:33:2f:33:af:ad:e1:9b:f6:ab:13:ad:7c:7d:
3f:cf:f8:9e:cb:37:20:ed:62:22:68:73:97:c9:91:24:f1:8b:
00:4f:ff:93:95:e5:c4:cc:a1:54:0f:1e:3c:e7:57:33:55:ed:
46:05:44:98:bf:5b:2d:22:d0:a9:31:95:5f:76:e3:0d:df:db:
97:22:c9:87:cd:f2:fe:31:3d:70:5a:9c:30:c3:da:aa:44:80:
b6:f7:1d:3b:e6:54:9a:39:fa:b2:66:00:14:9f:b7:77:81:7f:
35:fa:73:d4:c2:90:8e:be:3f:91:ed:ac:ff:9c:55:b5:13:8e:
fd:01:b2:ef:c3:e1:f5:1c:75:ef:1d:43:7c:d3:c0:46:f8:5b:
75:21:02:28:f4:59:23:00:e1:24:05:55:f2:a7:b5:ad:cb:ce:
9a:42:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:40 2025 by rpki-client