Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/652f9ddb-0a4e-33c5-9721-882dbbb5b6c4.roa
File: 652f9ddb-0a4e-33c5-9721-882dbbb5b6c4.roa (raw, json)
Hash identifier: gC8QWplu/yaRGIdvwIjqZFM2GgtH4z+63NxLix7Gz/s=
Subject key identifier: 9C:2C:0B:B4:42:25:4D:79:39:9C:9A:54:14:84:1F:B4:F1:66:F1:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CC6DB34F3DB1410766F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/652f9ddb-0a4e-33c5-9721-882dbbb5b6c4.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.44.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:c6:db:34:f3:db:14:10:76:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=61fb9cf7-6bc0-4552-8ad8-b824e23a42b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:e8:73:9f:d7:5c:69:51:6e:52:01:8a:31:
98:37:40:c3:58:1e:63:48:a3:ce:ca:17:b8:e0:2a:
9a:b5:26:ce:5a:31:f8:f7:50:a5:88:a6:75:11:79:
e2:a5:56:e1:89:cd:e4:8f:2b:e1:4a:31:ae:fd:c2:
91:5b:f9:a8:16:85:b7:91:e7:f4:a9:47:a5:b0:86:
4e:90:69:f4:e0:73:35:30:24:cf:42:2c:4d:5b:6d:
02:6e:8b:8c:ec:ee:c8:a6:42:db:fd:76:73:2d:38:
f0:13:75:cc:b0:1d:98:d2:4f:92:bc:58:73:5b:ed:
da:54:85:90:ce:8f:72:f8:e9:2b:69:b3:29:c6:95:
7f:69:16:d5:81:ae:22:f4:4c:a8:cd:d4:30:fe:f0:
b2:15:12:79:7e:32:8b:66:5d:0f:b7:78:35:d7:b4:
74:bd:60:e3:60:28:18:98:eb:85:74:a6:8f:f5:83:
58:da:2a:01:b0:05:07:a8:38:6e:db:c8:5f:40:44:
4b:c1:6c:48:cb:ed:e5:cc:96:00:b5:40:df:e8:a4:
81:90:cb:7c:7b:5b:71:32:ae:45:46:98:bf:84:f8:
99:65:50:b9:cd:4f:10:2c:c8:19:5f:72:84:ed:26:
ac:72:7a:ce:0e:94:35:75:fb:35:09:36:af:df:0b:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:0B:B4:42:25:4D:79:39:9C:9A:54:14:84:1F:B4:F1:66:F1:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/652f9ddb-0a4e-33c5-9721-882dbbb5b6c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.44.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:d1:4d:87:e9:2d:6d:22:30:1d:ec:c6:4d:16:60:8d:88:55:
0d:41:b8:25:be:64:01:8d:c1:77:16:38:92:7b:bf:d6:bd:af:
ac:97:ae:f0:e1:67:f8:8d:8f:36:87:c7:b0:36:e7:68:03:70:
e6:2c:a2:b4:fc:1a:ea:89:69:1c:4c:81:55:21:12:23:be:9b:
b0:05:51:ab:fe:e9:d3:57:5e:9e:c7:ed:7d:5d:b3:5b:e8:c9:
d1:56:53:a2:9a:9b:22:8c:b0:85:9a:3e:92:d1:26:77:60:d8:
34:3e:38:ef:af:05:11:5c:5d:61:6b:cd:ce:fd:20:cc:b1:77:
b9:3a:19:df:45:2a:0c:c9:00:5f:99:18:36:7b:4d:05:8f:fa:
46:9b:4a:c1:14:80:75:f1:79:e2:c0:25:ad:10:d8:32:f1:4b:
05:66:ca:19:e3:28:34:6e:4c:48:10:63:a3:a1:e7:8e:cc:e1:
2c:27:af:a5:42:3a:88:6a:cc:ce:b3:e7:56:21:ac:3e:70:88:
0f:8f:a8:b2:37:5d:85:69:22:a1:a3:db:e4:bc:23:20:39:2f:
c3:13:a8:84:ff:68:84:e0:2e:0b:ea:45:bc:d8:8d:c1:7d:86:
e4:a5:02:bc:60:3a:76:ea:64:99:9f:ea:80:37:11:f1:70:0e:
91:3e:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:01:23 2025 by rpki-client