Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb836a0-d5b7-37fa-99a7-84092e675e18.roa
File: 5fb836a0-d5b7-37fa-99a7-84092e675e18.roa (raw, json)
Hash identifier: wQYTxgBHFRbJffCDcVwRuLBfvrfx1/AtW5VpGLcDcAo=
Subject key identifier: 8D:A5:72:B3:11:CD:86:E6:B7:96:FF:7C:BE:EE:9B:3D:B5:9D:66:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C7233A9D80387B1E6C280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb836a0-d5b7-37fa-99a7-84092e675e18.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.198.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:72:33:a9:d8:03:87:b1:e6:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8c45c5fb-99c5-4834-a276-a3e25254678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:dd:98:c2:08:7b:2b:90:dd:aa:6c:63:85:
ff:f9:1d:bf:83:4b:7b:d0:df:ac:f2:bb:26:ab:83:
ff:07:46:93:38:d5:3a:07:94:9d:b0:c4:47:2a:c4:
f7:59:9a:d2:b8:32:f3:cc:3f:b2:98:7a:35:9d:1d:
15:c4:5c:0c:78:fd:59:76:60:c1:62:fa:7e:77:38:
0b:c4:6c:47:ca:7b:1b:1c:ad:de:01:16:54:27:43:
8c:1e:d6:e9:ec:67:78:e8:32:c0:f3:43:ef:77:ea:
c5:a7:8e:2e:48:05:c4:ce:6c:15:74:3d:ce:d5:e3:
eb:4f:5e:4a:68:c3:3d:bb:5e:a7:00:2e:c7:51:be:
7f:fc:3b:3e:72:63:c5:32:ca:86:d3:cd:b5:92:00:
91:57:c5:54:c4:8f:14:0f:63:5c:f6:04:39:1e:47:
6b:17:1e:1d:76:e7:2e:7e:92:88:d3:76:4d:ef:5b:
b9:85:4e:3c:c0:4d:d8:97:a0:8c:a9:83:7e:cd:ea:
b5:3b:7c:75:2d:27:ce:23:26:ae:e7:76:fa:63:4c:
6b:55:c7:61:c3:d2:b1:c2:db:67:c3:b9:0c:54:d8:
d8:8f:36:87:86:f3:3e:ee:77:da:a7:05:c6:28:d3:
dc:77:4f:90:0f:df:5c:6c:f5:f6:bf:c1:ae:cb:6e:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:72:B3:11:CD:86:E6:B7:96:FF:7C:BE:EE:9B:3D:B5:9D:66:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb836a0-d5b7-37fa-99a7-84092e675e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.198.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:67:d6:2d:89:2c:4a:54:a8:83:27:20:da:97:b9:a4:82:91:
a1:ee:ab:82:46:0a:59:1d:ba:22:95:64:71:67:a0:d8:32:7e:
e1:e6:83:1d:be:a3:61:39:a5:89:a9:27:33:0f:77:cb:ca:c3:
e2:06:73:bd:87:79:36:b4:ae:66:77:46:db:7b:02:c2:0f:60:
1a:a7:09:d9:3a:03:c1:79:eb:89:6b:db:15:7a:90:5d:13:47:
cb:82:16:43:4e:9c:26:90:8e:eb:06:d4:ca:7a:d1:59:fb:54:
4b:b2:4a:57:ef:7f:5e:ae:e3:88:e6:ef:2b:11:a1:14:be:cd:
65:47:3f:e0:c7:f3:b7:60:1a:69:ef:5c:b0:ac:c0:a6:22:34:
ae:3f:fa:5f:94:88:0c:ae:7a:5e:51:a2:3e:9d:77:e9:1a:6b:
4c:6f:6b:58:22:61:fd:7b:61:34:32:04:db:ff:f0:ec:08:ed:
a0:f3:87:d2:2d:eb:3b:2a:3f:69:d4:e7:e6:d0:ef:51:ea:09:
36:18:f4:f5:92:af:73:c3:6e:e1:63:47:d6:46:f8:88:30:3f:
f7:0b:26:c0:80:f5:ad:b0:f1:ab:f2:3f:bf:5f:f1:24:9d:a5:
4a:00:db:06:b0:f0:f9:5c:cf:4c:bc:3d:da:8a:dd:17:83:b2:
a7:65:f6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:55 2025 by rpki-client