Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/631290a7-a451-33be-9532-be225a50e1c2.roa
File: 631290a7-a451-33be-9532-be225a50e1c2.roa (raw, json)
Hash identifier: 9sr4ibsoIc+A1ftmZwMYiRZb0xF93A/cjszozV8gMpw=
Subject key identifier: 23:19:41:AB:9F:EC:45:70:12:DB:41:84:C2:3E:82:AA:F1:71:3D:BD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C115F6287234BF79EE59C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/631290a7-a451-33be-9532-be225a50e1c2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.226.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:5f:62:87:23:4b:f7:9e:e5:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=88eaef8f-a74d-47d8-993b-9af8c2f09313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:9e:78:cd:9c:2a:70:c9:cb:08:d3:08:94:
a5:76:47:bf:fc:23:38:f1:33:1b:84:bc:83:b9:26:
80:dd:75:63:b3:97:48:a4:14:3d:e4:25:67:1f:d0:
a5:75:4e:0d:dd:a5:9f:6f:d0:4b:2f:d0:f3:16:17:
45:57:5d:ad:84:62:75:0e:8a:51:da:47:a9:24:c1:
6d:08:bb:4f:1d:01:c1:c9:1e:8c:1a:b0:61:66:5d:
01:f5:4c:bb:3b:55:5d:a6:ab:17:e7:dc:21:c2:ad:
87:70:8d:93:14:ab:13:dc:58:64:60:28:23:6c:a2:
3d:f9:8b:34:13:be:41:d9:8f:85:c0:42:7f:5a:4f:
c4:37:f1:b2:f7:81:85:92:27:02:a8:5f:c3:94:fc:
bb:86:20:ff:bb:12:35:0b:0c:9a:ec:c8:a3:93:5b:
c1:f2:a8:ad:db:19:e9:dd:28:84:86:dd:d8:10:ef:
57:0e:50:11:66:04:df:3b:f8:f6:23:b1:ea:aa:f2:
88:b4:be:8f:50:2d:7d:ed:e9:8f:f6:52:df:11:c5:
7f:99:63:36:f6:48:8e:60:0b:74:76:e1:a0:f6:62:
8a:57:c0:4a:d9:db:93:84:1d:7b:1f:58:c5:47:b9:
a0:89:5b:55:ef:00:8f:c2:ad:8c:bb:9d:02:f7:b3:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:19:41:AB:9F:EC:45:70:12:DB:41:84:C2:3E:82:AA:F1:71:3D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/631290a7-a451-33be-9532-be225a50e1c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.226.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4d:74:24:01:de:9f:8b:0e:42:4b:05:15:da:3c:1a:ce:3c:
4c:f1:a7:a6:0c:77:86:86:09:ae:1e:90:f3:f9:ff:49:86:32:
fc:59:98:7b:13:96:b1:2a:85:58:d3:a9:2e:31:dd:40:e1:65:
66:d4:fc:13:88:ca:eb:a8:0e:7b:de:37:ed:2f:ae:ee:74:4f:
2f:96:8b:9e:39:62:69:4f:b1:a9:ce:65:04:41:4b:0a:04:65:
af:ce:70:6f:95:ca:9c:42:a7:89:11:4a:fc:d0:e6:fe:9b:b3:
d5:d3:4e:8c:d3:bf:50:2f:3e:3b:8a:80:3d:0e:6b:1f:c2:f6:
11:99:f4:f1:75:5f:54:f5:4b:33:dc:69:13:3d:23:79:cb:45:
8c:93:a7:47:fe:a3:1c:8e:92:34:71:e0:82:12:2d:4d:33:a4:
d8:cc:b9:42:a2:ee:93:10:67:15:67:fe:5c:5b:d9:5c:bd:39:
e1:5a:4e:82:31:81:7e:5c:b6:5f:83:01:87:c7:c7:a3:eb:40:
fd:ec:ad:49:81:c3:f5:09:49:e4:37:cc:1c:9c:67:f2:e6:d8:
20:a4:5c:8a:9c:bd:71:61:b7:4e:e6:b8:b3:65:70:da:05:87:
80:91:f4:3b:0c:4c:65:4e:4d:27:c2:f6:b4:ba:49:a6:54:3d:
db:01:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:46 2025 by rpki-client