Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61c864ee-b379-32c5-9434-696589956bcc.roa
File: 61c864ee-b379-32c5-9434-696589956bcc.roa (raw, json)
Hash identifier: 9TfajPIzB0Rw/WTvzPTCoEDdV1AFxZwXezUODcPvlY0=
Subject key identifier: 4B:BA:11:19:C3:0A:0C:3E:59:A8:B7:15:D0:7B:23:72:7F:FD:5A:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C153E5BC47AFD9D9B61D800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61c864ee-b379-32c5-9434-696589956bcc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.45.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:3e:5b:c4:7a:fd:9d:9b:61:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a6a1d6dc-b3e5-4649-9339-9145533720c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:1f:ed:dc:02:f4:b9:07:79:f6:ce:41:cf:
24:b4:fc:e8:3d:7a:7e:f4:97:a8:48:02:67:86:b0:
28:6d:fc:e5:fa:8b:9b:ec:c4:0d:2f:f8:93:06:fe:
ba:80:e5:1c:f8:61:7f:07:e8:9a:bd:57:95:f7:fb:
3f:b9:09:99:59:c9:7e:78:9c:47:8d:0c:c2:c9:6f:
f9:8d:4b:78:eb:49:c7:29:dc:57:2e:5c:52:22:fd:
34:5c:42:29:36:08:cb:65:38:6e:66:71:5c:b3:73:
72:79:51:b2:37:a3:4c:da:25:70:a5:32:80:1d:2b:
f6:c0:44:bd:15:41:3d:0b:64:fe:8c:3f:0b:dd:be:
73:f6:93:d2:40:86:a7:81:da:9a:17:a6:a1:94:9d:
57:d0:f7:d3:9c:a8:4e:53:94:f9:50:14:6e:ac:b5:
ce:b3:56:08:cd:07:b4:ca:94:0f:7c:0f:08:57:df:
4e:61:57:a9:16:38:1a:e5:6f:66:52:4a:d9:02:06:
80:56:1d:4b:8c:5b:a4:c1:95:a5:c4:44:69:7a:5e:
b1:ed:fb:a3:19:bc:02:b6:cb:06:8b:57:45:df:d9:
07:93:4a:83:d0:ec:2f:a0:a9:d0:41:03:db:2b:ae:
94:c0:3c:fa:0e:8a:f5:16:b8:96:3c:22:b2:94:07:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:11:19:C3:0A:0C:3E:59:A8:B7:15:D0:7B:23:72:7F:FD:5A:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61c864ee-b379-32c5-9434-696589956bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.45.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:17:47:ce:36:8b:21:0d:e6:04:f5:55:af:10:32:af:3c:c6:
23:03:55:58:66:e1:e7:c3:ad:ba:02:26:08:96:02:db:bb:32:
82:a2:f3:01:d5:65:44:9c:bc:5f:28:2b:05:d0:f4:66:f0:66:
df:f9:d3:c3:3e:9d:a2:8b:38:8d:26:a2:a4:86:3b:f9:b3:2d:
9b:9e:3f:d8:be:59:21:a1:6b:3b:de:f0:7f:d5:c7:77:7c:51:
c3:09:7a:5a:02:0e:11:35:b7:11:04:52:bf:93:72:f1:ae:73:
d7:a7:f2:6d:9e:c6:51:9b:d3:85:1e:1a:e7:66:b6:d0:8b:48:
94:cc:fa:48:88:fb:39:06:bf:a2:19:88:e2:2a:aa:19:fc:19:
65:93:9d:3e:a6:96:4a:a8:cf:5d:35:8c:74:7a:77:66:f5:f0:
09:6b:77:2e:04:ea:44:2b:a6:da:20:b7:13:e7:37:e0:c2:9b:
63:aa:14:83:dd:e7:e3:4c:b8:26:dd:fe:83:ec:ce:e3:ee:6b:
e0:72:a5:53:bb:1a:cd:e8:16:76:d7:f0:1e:d4:e6:d5:ae:ab:
c0:42:7d:35:c7:8b:9c:02:18:29:9a:b4:3c:c2:93:39:57:57:
bb:41:e5:ce:a0:77:f6:8b:d1:df:67:cc:f4:95:0d:55:5c:ca:
08:83:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:32:25 2025 by rpki-client