Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e78a7b-cb03-3dca-89b6-160e9617ab76.roa
File: 49e78a7b-cb03-3dca-89b6-160e9617ab76.roa (raw, json)
Hash identifier: MU9ebp5dqw/iwbogut7fFNesw9O9ubABD4c38G+sEjk=
Subject key identifier: E8:0F:B4:FB:06:5D:D2:B8:CE:DD:4F:DF:E5:E2:FF:B4:6D:A8:EE:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814407169D299888B91BB4400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e78a7b-cb03-3dca-89b6-160e9617ab76.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:71:69:d2:99:88:8b:91:bb:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a002b3fc-5621-46fa-9395-bf3b2c52f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:94:15:5b:8b:cc:93:47:e8:4b:b1:cd:4b:
e1:00:2c:cb:ff:ce:5d:18:55:b3:2b:ed:17:b1:44:
dc:ba:0c:f2:ff:a8:f0:83:c1:23:e3:ef:3e:bc:a2:
c1:c6:37:e7:b4:84:7e:40:57:85:0b:5f:34:a2:9c:
e2:9e:60:5b:63:38:9e:aa:16:13:3a:61:39:b9:5f:
96:b2:87:01:a5:62:e7:f8:a3:c3:1e:39:dc:59:86:
f6:b1:7e:25:4c:84:50:64:24:b2:40:94:9e:fa:9b:
fd:52:7f:74:89:6a:e3:ff:a2:8e:8b:24:21:4b:05:
9e:d3:85:d4:be:0c:18:30:37:7e:92:06:c4:f4:34:
35:b6:3c:06:17:04:58:fc:7e:cd:93:27:56:57:5c:
a4:58:a5:b1:56:07:bb:12:bd:13:e0:8e:e9:11:5d:
c0:46:82:f2:38:32:04:6a:e7:1e:a1:f0:f6:f0:b6:
de:d9:df:e2:72:10:ed:ff:f3:e5:14:e0:ff:c3:ce:
38:fe:9a:f5:5d:1b:4c:08:2e:5e:16:b8:77:65:c6:
de:ab:48:bd:a7:f3:3d:1c:e5:4b:38:ba:f4:b4:6b:
89:05:ea:db:18:b9:13:8b:48:a0:9e:2e:26:2b:1d:
86:b4:66:0e:1d:5c:47:68:22:1c:fd:5d:3a:5d:57:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:B4:FB:06:5D:D2:B8:CE:DD:4F:DF:E5:E2:FF:B4:6D:A8:EE:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e78a7b-cb03-3dca-89b6-160e9617ab76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:89:2f:ec:3b:a6:0c:db:37:18:1f:ea:c6:f7:a4:17:13:c0:
ee:1c:6e:79:cf:31:80:37:3b:31:72:b2:e9:95:37:a6:9a:38:
8c:c2:f2:59:db:0f:89:20:db:5d:88:5a:e3:6e:c2:24:db:87:
97:5e:85:93:b4:5f:ca:f8:34:c5:61:e6:86:2b:1b:27:41:bf:
1a:09:82:62:c6:3a:3a:5b:17:47:bb:73:4c:ba:40:2a:b9:02:
b8:bd:52:07:4f:31:ee:41:3b:2f:54:8d:eb:19:75:b4:a8:a3:
d3:1b:ac:04:f6:88:cd:f9:ee:d6:3a:40:27:0f:d6:a5:5d:c9:
10:64:f0:65:08:d0:39:24:34:f8:07:7f:a1:a6:c7:cc:09:6b:
3d:7a:bf:f4:c0:57:23:7c:f3:21:d1:04:70:66:00:51:57:1a:
71:cf:1c:99:f4:e2:87:cf:b4:49:09:0a:dd:1c:03:43:18:5d:
fa:69:4f:c5:73:b1:8b:c5:de:af:48:01:7a:a4:f9:e1:3f:01:
56:b4:46:ee:c4:96:ca:4d:07:ec:37:8d:f3:44:42:83:6c:4d:
a3:83:be:13:02:bc:78:41:cc:94:b2:45:45:42:58:35:cb:0e:
e4:f7:56:fc:33:b3:fa:33:84:95:fe:42:aa:04:c6:2c:24:d7:
3d:99:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:40:06 2025 by rpki-client