Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5359237d-356f-38a1-810c-1590c572da13.roa
File: 5359237d-356f-38a1-810c-1590c572da13.roa (raw, json)
Hash identifier: 3OZRbXOfnFAkBIqbwbFpcMZvqi0vfe7eAqHdzw4BeiI=
Subject key identifier: A6:84:00:97:8B:F1:24:6E:95:52:0E:F8:DE:BA:C8:C1:79:74:73:B8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130864EC5D10BAF6483888
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5359237d-356f-38a1-810c-1590c572da13.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.228.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:08:64:ec:5d:10:ba:f6:48:38:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6748c71d-fb9f-40af-857e-841776bc3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:5f:06:99:ab:a2:61:74:12:10:9e:2a:0f:
c0:15:cc:b4:ba:eb:4f:d1:89:5d:83:b7:d5:7c:65:
d0:b5:af:10:d1:e1:11:01:ce:63:ee:9a:66:9a:b9:
55:41:a9:63:42:1b:7d:c9:0a:af:73:79:cf:3e:af:
16:09:ae:ad:1d:67:b0:07:dd:9b:e6:ae:1d:de:ef:
ea:b0:81:c8:0b:53:ab:eb:8c:86:bb:58:09:46:43:
a5:65:44:20:72:1f:62:d9:8d:06:2e:14:44:d5:f2:
f9:20:28:5a:10:98:45:25:7c:f2:61:b6:46:7a:02:
0f:7d:fd:32:5d:01:37:ff:e2:2e:35:25:58:43:56:
71:83:e3:3f:ae:39:24:42:84:90:7c:62:87:f1:bf:
8d:58:1e:bd:87:4f:65:a4:84:42:e2:30:69:51:f4:
64:88:13:7a:3f:b5:d0:53:ad:c9:31:6d:3b:af:93:
78:f5:fe:7a:c3:89:cf:dc:ad:6e:41:58:eb:db:9f:
20:68:87:bf:53:46:83:29:45:48:38:75:4b:8d:98:
33:8c:e0:61:7b:da:5b:8a:5e:c3:74:7d:72:f4:16:
45:60:be:8e:18:0e:a0:3a:59:cc:ec:2d:76:9f:58:
ec:bb:4f:31:04:66:ab:4b:b4:8f:bf:2b:ad:4d:ac:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:00:97:8B:F1:24:6E:95:52:0E:F8:DE:BA:C8:C1:79:74:73:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5359237d-356f-38a1-810c-1590c572da13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.228.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:20:bb:79:b0:95:94:91:8e:c3:39:22:55:70:5b:44:48:ce:
d9:b0:d9:4a:5d:67:94:47:a9:ae:79:8f:1c:88:f0:8e:c2:89:
4d:21:75:16:39:76:82:f4:43:ab:c1:29:db:b9:04:83:ac:c4:
a2:51:ea:61:53:79:12:5c:79:cc:f2:0c:69:50:64:2c:c1:b6:
6d:2e:e3:7d:d2:66:6d:7a:65:7b:cd:59:e0:f3:45:bc:98:0d:
cd:b2:ba:08:27:fd:a3:28:a3:23:d3:b3:80:a0:0e:50:93:c6:
36:40:5f:32:e6:6d:50:b5:c3:b4:79:a9:2b:8c:7f:11:dd:18:
50:48:3c:cc:00:31:ae:bd:c5:5a:6f:24:0e:4a:de:cf:0d:90:
fc:ad:fd:e7:3b:f5:1a:df:6e:dd:a9:ff:4f:61:bf:fa:ee:82:
8f:45:c9:75:15:4e:69:db:8e:26:fe:1a:d6:21:f6:65:f6:70:
b6:b1:eb:83:50:e5:da:4d:36:64:d4:05:52:fa:fa:12:c0:fb:
89:14:bc:20:e1:b8:d6:1a:b7:d0:ac:ea:80:c3:4a:eb:56:83:
e2:e6:d2:c3:6e:16:d9:9b:ee:ee:fb:91:26:50:d8:ae:2c:70:
c9:02:d2:29:a7:2a:0c:99:d1:f8:6a:5d:59:24:2f:f5:9b:69:
44:e5:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:53 2025 by rpki-client