Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cc020b9-e0a1-3bb3-9c90-10d3029149ff.roa
File: 5cc020b9-e0a1-3bb3-9c90-10d3029149ff.roa (raw, json)
Hash identifier: vzGsN2OJB1C6EwEj1yyCFQ9bv/OQr3D95f/NDYZnBPc=
Subject key identifier: 4B:EC:F8:9F:F8:85:77:08:9F:F1:11:7B:36:1E:E0:51:D6:FE:D0:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11C80E16E97F6370F1EB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cc020b9-e0a1-3bb3-9c90-10d3029149ff.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.42.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:c8:0e:16:e9:7f:63:70:f1:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=96f5fc8b-54bb-4882-954c-c7bbcc40c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:5c:ad:68:f2:5e:56:bd:1c:3b:b0:d8:6b:
18:eb:a9:fc:bc:31:86:39:f9:2a:d5:4a:5f:67:44:
02:12:8e:98:84:ea:22:a8:1d:d0:6e:ec:7c:d6:fd:
43:b0:36:7b:60:b3:7d:34:d4:48:77:17:09:c9:ae:
f8:43:69:e1:4f:31:0c:35:9a:98:44:49:0e:56:fe:
8a:6c:8e:7f:20:eb:b6:5c:69:9a:20:96:60:68:99:
61:9c:5e:1c:4b:90:44:06:83:db:b1:65:12:1f:5f:
80:34:f6:35:12:1c:63:75:a5:06:9b:6b:61:f1:c1:
ee:74:56:6e:c6:02:cb:87:60:8b:22:39:0b:a9:3c:
e2:ee:21:ce:2d:0f:36:43:97:04:57:a3:26:8a:1f:
48:a0:34:a6:3d:2c:26:34:c5:06:d3:8a:35:be:10:
fb:8c:c4:fe:86:c8:e3:33:13:b1:11:96:d4:98:d4:
b2:c9:9d:18:30:81:41:24:f9:2e:d2:bc:19:c5:e9:
82:96:3a:aa:d1:55:b9:5a:a1:ca:e2:2b:98:65:60:
98:c2:72:db:25:74:4a:ba:ee:d3:cb:fc:50:b6:39:
8d:81:52:63:51:b2:56:6b:7a:8f:30:42:38:7b:cb:
80:1d:15:0d:f5:66:cc:85:90:62:c4:bb:fc:90:d5:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:F8:9F:F8:85:77:08:9F:F1:11:7B:36:1E:E0:51:D6:FE:D0:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cc020b9-e0a1-3bb3-9c90-10d3029149ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ae:45:86:39:d8:d4:be:17:f3:8b:8b:7c:3d:f5:2e:17:20:
d4:ec:55:a9:e0:42:35:39:01:ad:e1:24:53:f3:16:df:3e:c5:
37:0e:3e:14:0f:1b:2a:50:e7:85:d1:9f:ef:fd:b0:7e:16:e9:
86:22:3c:1d:44:bf:75:83:d6:4d:ac:42:a3:f1:80:2d:e9:de:
08:45:df:bc:29:c9:d7:c9:de:0d:3d:c7:12:2b:0c:d8:f4:c6:
d9:66:d2:4b:65:cd:d3:7d:4b:09:0c:c7:f4:56:6a:81:06:b7:
43:be:83:70:49:47:56:0b:1c:03:ac:1e:6e:a0:e3:6d:3c:81:
e6:d9:01:05:35:34:1f:b1:f5:4b:24:9f:64:77:70:4b:a9:cf:
13:b3:a9:51:05:a5:0a:d9:5e:ab:43:b9:30:31:62:8f:6c:52:
5e:96:16:09:c6:f7:ac:9c:2c:d6:33:ea:7c:df:41:4e:41:16:
2f:ea:7f:25:84:aa:ea:ef:32:fc:61:1a:a0:8a:b0:27:ec:48:
42:c1:03:97:44:e7:34:16:29:61:f0:ac:a9:91:ce:9d:af:4b:
89:8f:3c:85:3d:38:44:30:a3:6c:97:33:1e:a9:ad:f2:b7:f5:
a7:17:26:ae:4b:01:74:50:a1:93:53:8e:af:f5:c4:4e:2f:be:
7a:45:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:41 2025 by rpki-client