Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e7c0e9d-c1b9-3476-bc22-df8d2181394b.roa
File: 3e7c0e9d-c1b9-3476-bc22-df8d2181394b.roa (raw, json)
Hash identifier: 5kb0PPEDVSBB5dEdYAOrF18EGyXqFCi1KS6qS/1UceM=
Subject key identifier: 4E:9E:E1:B1:25:70:F4:31:9E:2D:B0:93:70:9B:60:8D:D9:20:E3:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CD73443106B6050602180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e7c0e9d-c1b9-3476-bc22-df8d2181394b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.57.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:d7:34:43:10:6b:60:50:60:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4a7ae17d-8411-4688-88f0-902fdeddf416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:59:bf:a9:60:74:19:73:7d:5e:a4:87:93:
6e:b3:3a:31:0e:6b:ab:51:9f:7e:aa:35:ce:84:f6:
a1:5c:bd:28:69:0d:1c:33:fc:e9:53:83:e6:74:07:
fa:95:88:c3:a3:03:62:de:12:05:dd:d0:33:f7:9c:
66:9d:54:d6:b2:0d:1c:8c:3c:53:bb:61:dc:7a:c3:
56:72:93:60:ab:a5:0b:32:fb:25:de:d7:26:77:0d:
5a:e7:04:31:ef:5e:3e:30:5a:d5:98:c5:cc:6f:ad:
bf:ed:7d:35:31:da:95:67:53:b4:c0:54:2e:ed:ee:
d2:fd:0c:77:4a:f8:fb:50:b4:74:20:05:9a:ab:ec:
cd:29:0d:2c:4d:4d:77:eb:de:f3:b6:29:ee:38:0d:
f9:0f:5a:a3:53:7b:dd:ec:04:ac:79:9a:7d:6f:81:
dd:b8:67:de:cb:aa:05:1f:5a:e7:1c:d2:03:57:f6:
2c:f8:9b:9a:98:f3:5a:76:68:6b:ec:21:d3:a0:ef:
c5:55:cb:74:c5:66:49:2c:98:ce:6d:22:ed:60:be:
4a:b8:7d:0e:63:5e:77:8a:33:6f:e0:4a:e4:99:82:
b5:a5:2b:3e:60:58:71:50:42:70:9e:ad:da:68:2b:
6b:0c:7c:db:1c:0d:e9:9a:4c:6f:7e:05:1e:e7:61:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:E1:B1:25:70:F4:31:9E:2D:B0:93:70:9B:60:8D:D9:20:E3:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e7c0e9d-c1b9-3476-bc22-df8d2181394b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.57.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d0:05:4b:1a:7e:9d:82:0d:0b:d6:64:5f:2f:d4:31:f9:4b:
8e:fd:50:1f:59:88:f2:b0:12:98:26:b1:4d:33:37:06:82:22:
5d:18:d9:76:c1:08:57:bd:ac:4c:9f:c8:d1:21:cd:b6:c5:22:
2b:69:b1:52:c4:b5:29:f3:b6:8d:0c:84:43:82:cc:bc:b8:37:
5b:cc:a3:d9:2c:33:35:d6:e6:d9:01:47:49:dc:45:d3:f8:d7:
e6:93:f2:74:95:ae:18:2a:a4:26:af:c0:67:08:53:8b:26:65:
09:f1:66:23:ae:c5:3e:5f:86:6a:b2:76:0a:40:aa:09:49:be:
97:14:e8:fa:e2:53:f1:06:0e:f6:1c:25:ad:59:97:9e:3c:70:
7c:b4:28:71:c8:e6:67:fa:b1:d0:e1:79:72:da:ff:1b:df:f4:
76:69:ad:a3:14:cb:e3:ed:bb:67:71:e3:d4:f2:61:50:8d:31:
ac:a8:72:c2:38:ac:87:29:e9:39:96:09:f4:f9:a9:0f:a4:74:
00:b4:da:76:61:cf:41:c1:18:64:fa:c5:55:ab:37:31:dc:f9:
a4:69:36:ea:da:d9:d7:83:2c:0d:e6:dc:97:53:9c:f3:67:92:
dc:94:48:7e:a7:19:0c:fb:36:5b:bf:8a:50:32:a0:94:f1:b7:
2a:14:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:33 2025 by rpki-client