Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65ddc6d8-1c19-350b-8a53-fa832637cfdd.roa
File: 65ddc6d8-1c19-350b-8a53-fa832637cfdd.roa (raw, json)
Hash identifier: U9OaWflkDNdd6cljCFDdsjM86qiyGnFSHVWwoDstH0I=
Subject key identifier: E4:56:F7:5D:FD:8E:D3:70:85:DF:42:89:AD:46:24:21:D2:DC:58:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C9FC37DCFD186F99D1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65ddc6d8-1c19-350b-8a53-fa832637cfdd.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.201.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:9f:c3:7d:cf:d1:86:f9:9d:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ad58a548-cd8b-44aa-8b26-35a71b7460b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:18:d8:91:76:44:03:ae:b7:09:71:be:9f:
a5:ae:1a:9d:dc:86:8f:85:a5:10:ce:14:46:bc:04:
df:b5:18:e3:31:5b:d1:f8:c7:c7:33:cb:20:3f:b0:
b2:6c:3f:a0:99:d3:45:a6:fb:5c:9f:43:c0:a7:f8:
3e:08:f1:71:5b:8f:2c:17:28:d7:6d:5d:2e:ef:e0:
3e:55:6f:73:c5:2e:06:2e:76:74:31:18:72:ab:ea:
2f:e1:b4:ce:d1:a3:5f:4b:c3:44:ed:82:12:41:0d:
4a:76:61:82:78:0a:f2:5b:d8:40:a6:bb:19:b4:d9:
e6:30:e9:5c:86:a5:89:65:70:43:a4:ec:b1:48:0b:
89:1d:78:0d:76:f9:85:ed:c1:7e:d7:8d:ce:3c:4e:
11:27:55:2a:7c:ad:ca:aa:4f:0a:45:2e:df:70:dc:
0b:ad:44:02:91:1c:3a:e3:0d:55:2a:f9:69:29:1e:
a6:96:67:af:03:e9:db:2d:a3:24:09:73:19:1b:bc:
a6:4c:a1:ab:3a:98:a3:17:67:d0:48:b7:29:50:40:
87:94:81:b1:4c:67:b8:d5:13:e2:cb:73:78:f2:06:
07:f3:a3:2b:60:b8:93:b9:d3:86:66:cc:c1:23:21:
68:4b:46:cf:4f:b6:13:18:f9:02:2d:03:bd:35:04:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:F7:5D:FD:8E:D3:70:85:DF:42:89:AD:46:24:21:D2:DC:58:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65ddc6d8-1c19-350b-8a53-fa832637cfdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.201.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:33:5a:44:78:94:1d:ee:8a:8c:6e:e7:b3:c0:2a:02:2a:51:
a8:67:23:56:e0:ba:b2:1a:7e:c9:1c:b1:f3:a8:04:ed:e4:50:
56:5e:2b:58:c0:72:da:7c:44:e0:1c:14:c0:b5:99:c4:22:91:
91:bd:3f:02:e1:13:3c:b6:d1:16:fd:53:a6:73:6e:aa:e6:c2:
31:6d:41:33:ce:fd:b9:23:e0:9c:35:b4:fd:f2:be:7d:d7:1b:
cc:eb:50:1d:17:54:5c:f1:2d:21:c5:31:4a:49:b9:82:22:e4:
44:7e:fb:49:c4:95:6f:4a:fe:bd:06:dc:28:6f:b3:e3:02:07:
84:f9:a2:79:74:35:9b:7d:91:db:96:3f:b7:68:7d:82:53:eb:
40:fc:7d:62:9c:c4:20:59:91:48:48:5e:c1:eb:f4:4f:4f:b4:
51:23:59:74:4f:52:3d:15:38:d0:09:90:5f:29:c3:8c:ca:bb:
a9:e1:4e:a1:30:4b:fb:1b:9f:fb:d1:dc:50:19:a3:22:34:91:
32:fc:cf:68:3e:be:2e:ad:e2:cf:93:f1:72:3f:4b:2c:d8:58:
78:33:8b:6e:f9:ba:44:24:55:6e:16:64:07:bf:87:9d:d1:05:
68:5f:31:57:1c:6c:1e:0a:e4:d5:9c:61:8c:07:e3:36:91:6b:
d7:d2:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:47 2025 by rpki-client