Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b92c8f7-b488-3a46-b4e6-27b8d3bf53a3.roa
File: 3b92c8f7-b488-3a46-b4e6-27b8d3bf53a3.roa (raw, json)
Hash identifier: KUtCb7vx2hDiUQuzA6gK+cwqJAkHfiSILbmus+ibVDs=
Subject key identifier: 9E:09:F5:A4:C9:64:FA:F2:37:5C:6B:6B:05:92:13:E6:43:94:0A:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144070121D1869F392914A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b92c8f7-b488-3a46-b4e6-27b8d3bf53a3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:70:12:1d:18:69:f3:92:91:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=893629b0-913a-4c69-a2bc-d53dbd24d478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:d0:13:f1:10:40:59:22:27:0f:46:45:59:
28:16:71:6f:88:05:0d:b9:68:1a:83:f5:90:5a:04:
6f:ea:5c:09:24:6c:e8:6c:20:bc:0c:22:8c:af:fd:
1e:da:f1:de:45:0a:c9:f1:65:c4:40:44:67:51:26:
2b:94:bd:85:05:01:88:11:3d:2c:5d:dc:60:9d:9f:
62:56:6d:0d:a2:3c:41:ab:a5:5c:0f:b4:93:80:06:
1d:6c:e4:66:85:a3:22:6f:56:b2:bf:39:ef:49:2d:
27:d0:2c:fc:75:2d:a9:08:ab:8d:fc:1f:6d:08:ae:
16:e2:04:3e:ed:64:1b:60:69:a0:2d:fc:41:4d:6d:
ea:7a:c5:51:62:d9:e7:87:b1:91:a5:f1:26:a1:78:
c0:ca:06:5c:8f:82:c0:a4:8a:0a:95:e3:d1:6b:b0:
19:3a:91:6b:0d:b5:b4:a8:e7:02:4d:18:7f:b3:8a:
c4:98:2a:1b:38:71:a4:62:4d:05:52:72:f5:23:53:
ae:58:43:18:d4:c0:17:3a:85:76:40:b9:8b:35:40:
55:bb:12:9d:a1:74:61:d7:7d:ad:3f:de:f9:a7:82:
72:33:95:75:9c:80:a5:b9:66:f9:3e:b8:82:26:20:
36:25:8e:e7:c7:49:ea:09:9c:da:37:09:d0:27:89:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:F5:A4:C9:64:FA:F2:37:5C:6B:6B:05:92:13:E6:43:94:0A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b92c8f7-b488-3a46-b4e6-27b8d3bf53a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:65:70:36:ee:43:e1:0b:58:64:92:9a:fb:83:b8:9b:50:eb:
44:52:a4:8f:48:c6:87:88:f2:01:44:0d:53:25:18:0d:7c:f6:
34:01:c1:ad:61:ce:91:8b:f0:8b:5b:83:f0:fd:9b:df:1d:0d:
52:a3:b1:dc:87:d7:39:56:fa:00:d1:e1:2a:e4:07:79:52:25:
5f:14:7d:76:d9:a9:32:22:36:ac:05:b0:c8:76:74:ee:f8:83:
55:f1:4c:53:c0:99:af:75:60:d4:8e:b4:b7:51:22:00:8f:d2:
63:ad:e0:f3:a3:6c:f9:8e:8d:26:5f:4b:6e:f7:d9:bd:fb:0e:
81:af:8f:e6:dd:1d:57:cb:10:75:db:8a:05:71:64:ff:ce:eb:
e2:28:2d:bb:57:7b:37:77:8d:1c:90:2a:b5:d4:88:30:88:16:
72:b4:e2:a2:41:01:8b:b2:c1:08:db:5f:75:fd:3f:9e:ac:00:
67:6e:3b:2b:b2:21:85:ed:d6:2c:1c:46:19:f4:ab:8f:e4:56:
fd:25:53:89:25:60:bb:46:8f:47:ea:76:79:f9:bb:5a:83:e8:
9a:89:5e:0a:81:1b:da:9f:42:c0:5e:b0:ae:02:b3:66:bd:a1:
89:bb:0c:26:cd:81:0e:23:06:16:9f:d2:8d:4f:b9:04:44:93:
36:a0:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:23 2025 by rpki-client