Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c0566a3-11d6-325d-a852-7cecdf766638.roa
File: 4c0566a3-11d6-325d-a852-7cecdf766638.roa (raw, json)
Hash identifier: uQoRCjkXRslCD/QjGSbapkjRe6LuICuQATffSSRG9eg=
Subject key identifier: FD:15:AA:10:91:26:11:2E:A4:15:FB:CA:F9:0E:74:2E:55:B1:87:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C115B0C53EB1070C8EF0D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c0566a3-11d6-325d-a852-7cecdf766638.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.223.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:5b:0c:53:eb:10:70:c8:ef:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=73ff3458-bdac-4a85-a5de-4287eb3edaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:fb:b1:eb:1d:b9:2d:34:07:39:d7:7b:e8:
50:35:93:af:81:53:33:a7:28:e6:48:6a:b7:c5:a5:
84:35:f1:76:ab:45:23:59:f2:9e:f3:6c:84:26:ef:
48:cd:35:0b:7f:90:59:3a:51:a1:0e:56:9e:cb:c2:
27:9f:91:ad:41:e6:0e:e0:71:23:ef:7a:6c:cb:4b:
8e:c9:a4:3d:27:2f:29:d0:b2:54:d6:04:e0:0e:35:
7e:8c:50:5e:68:f0:0d:d2:aa:74:65:06:5c:ae:a7:
90:dd:16:3a:f9:98:61:93:70:06:e3:a0:c5:fd:c2:
cc:93:1f:e8:c3:97:cb:5c:36:fd:af:0e:49:3e:44:
5a:0d:d7:4f:55:5f:80:b5:f9:6a:4e:ab:f3:3b:57:
91:2a:96:bf:91:b4:34:a2:fc:50:f1:88:47:1c:6f:
08:0d:a3:82:82:4e:b2:b5:8a:79:ba:b6:69:5d:41:
ca:13:a9:91:a2:05:e8:fc:52:34:6a:8b:e7:5c:d9:
b4:2d:da:eb:d8:31:4d:3c:9c:6a:02:66:b6:10:f4:
82:e9:d8:a9:04:7b:73:5c:a6:f4:df:b4:da:43:fd:
00:89:b3:56:6b:e0:bc:86:10:70:5c:84:c4:6c:7a:
93:18:ae:11:25:ee:cc:0c:73:96:f9:00:34:c9:44:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:15:AA:10:91:26:11:2E:A4:15:FB:CA:F9:0E:74:2E:55:B1:87:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c0566a3-11d6-325d-a852-7cecdf766638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c3:f9:f5:ed:ad:f5:cb:77:97:39:df:b4:1d:3c:42:76:22:
9f:23:d1:95:37:fb:dc:54:9f:77:f9:de:31:e4:c9:3b:a3:c6:
9c:c2:ab:1e:9c:cc:aa:ff:9a:8f:ab:bb:15:76:5b:f1:90:87:
54:3e:94:05:48:06:20:c2:06:f4:88:8a:9e:c4:b3:97:fa:b6:
59:fc:6c:48:3e:2c:be:96:86:ad:24:be:04:4e:ce:73:bc:89:
36:e3:3b:e0:56:10:d7:ef:fd:cf:90:23:03:26:de:dd:f7:0b:
c2:ae:85:89:a1:80:4a:11:3e:9a:97:c2:af:3f:5e:eb:45:08:
59:53:d2:67:e2:e9:59:f5:cd:c2:f0:ea:04:b8:ee:94:0c:23:
95:ac:24:c2:da:7a:94:3e:30:da:e1:30:98:b4:72:5f:fa:5b:
bf:c2:54:96:77:18:bf:25:99:57:01:30:4f:53:39:c5:1f:19:
24:c1:64:06:8b:ad:be:e5:84:fc:91:fb:35:f5:9e:e8:df:4e:
73:37:43:ed:61:f3:8a:b7:b5:27:a5:89:3c:6b:38:68:43:4e:
b3:21:d4:54:dd:aa:a4:b4:45:c2:90:bf:d8:33:45:60:98:2a:
1f:ab:15:cb:c9:aa:75:1a:a3:e4:90:ce:f6:e3:85:22:cb:9f:
6a:95:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:58 2025 by rpki-client