Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f287a22-304d-3fb7-8ca0-06debee8712d.roa
File: 5f287a22-304d-3fb7-8ca0-06debee8712d.roa (raw, json)
Hash identifier: GPhmkfMuTPDXFQOnpkJeuDVniQZciZ3HEN45aHC/Wt0=
Subject key identifier: 3F:33:28:CB:39:CF:97:A0:C4:51:CB:7B:43:45:EB:AA:2C:EA:F5:CF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EDE06CA6648AC65988D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f287a22-304d-3fb7-8ca0-06debee8712d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 98.216.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:de:06:ca:66:48:ac:65:98:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5902a2a3-5faa-4ab7-9810-e2fbff963c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:7c:a1:83:ad:36:10:78:f9:2e:09:dd:a6:
bf:0f:09:97:b8:5e:7f:54:d8:72:e3:a4:91:41:c5:
0a:ea:f8:38:f8:36:44:d2:8e:0d:23:33:36:28:26:
27:7e:d3:1e:bd:09:41:0f:fe:a8:63:e9:21:ea:ab:
e7:44:74:ee:70:0a:79:16:46:6b:3f:d8:ae:bf:b6:
26:0b:cf:95:8b:47:7d:9c:39:b6:ba:2d:85:aa:7e:
c5:43:bd:80:b7:40:b9:76:1a:81:31:17:43:0a:81:
cb:c8:92:60:ec:ed:82:d8:e3:ca:b6:f6:7c:9e:3a:
b7:d6:e7:65:da:62:ce:b5:ee:83:fc:61:04:80:6f:
22:0b:96:78:37:12:1e:3c:81:a5:24:e1:30:dc:20:
1f:b9:7a:8f:a4:3f:b4:48:fc:fc:a0:7a:f8:28:ab:
0c:53:db:4e:6a:41:80:d6:ed:48:6f:57:7f:11:db:
aa:79:bd:0e:e8:be:c2:ab:7d:94:8e:50:04:3b:42:
c8:d9:7b:8a:a4:20:4e:15:94:f8:a9:34:ec:6d:1f:
70:51:aa:b5:8b:9b:c7:bc:11:2f:1b:d6:32:80:63:
a7:bb:3a:83:e4:d0:93:78:d8:90:4d:5a:46:a1:90:
16:9e:3f:0c:59:81:c1:18:58:40:db:5c:e6:2c:9c:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:28:CB:39:CF:97:A0:C4:51:CB:7B:43:45:EB:AA:2C:EA:F5:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f287a22-304d-3fb7-8ca0-06debee8712d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.216.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d6:29:43:b7:dd:77:8b:41:e0:11:70:b5:e8:4f:23:70:9a:
c8:fd:dc:6a:7a:3f:39:90:14:0f:cf:f2:a7:53:5b:98:ba:80:
d4:18:9d:3f:21:6a:07:30:16:7f:e8:97:49:d7:56:2b:5b:fc:
21:17:de:c8:da:57:bb:57:73:dc:fa:62:37:6e:9d:d6:2b:96:
f1:5e:8a:09:7d:c4:a5:9d:2c:b2:6a:15:ae:6f:14:ab:82:43:
67:aa:c0:99:26:98:66:3f:50:5a:14:08:50:2c:8c:86:9a:63:
4e:06:d4:3a:bb:eb:84:f6:61:45:0c:b8:37:3c:0b:11:9c:60:
b5:d6:92:98:44:51:8b:21:14:7f:da:b1:9b:3f:34:da:b6:9c:
cf:e7:96:0b:3b:9a:ae:c9:43:97:52:c1:21:8f:bc:f2:4a:98:
62:5b:06:06:43:56:26:64:0e:06:c0:2f:01:5e:70:e9:91:56:
ce:87:02:c3:09:d6:62:9f:b0:f2:a0:f8:c7:94:0c:29:1f:47:
9d:07:88:d9:e8:7f:eb:45:7a:10:e1:3c:e9:1c:6a:f2:7c:c2:
6f:cf:a8:70:01:69:af:a5:56:23:9b:d6:e6:6d:1c:7f:02:48:
ed:e2:e7:45:c3:b7:fe:a8:76:0b:3f:87:8d:90:d4:ec:87:e9:
09:10:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:46 2025 by rpki-client