Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa
File: 74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa (raw, json)
Hash identifier: ttZo5fxMFCimuld8q2+q98owCK3sy4QmmQqYtZGf4iM=
Subject key identifier: BC:6C:95:86:CF:37:0B:4B:D7:9D:11:C3:1A:AA:F6:F2:48:D0:3B:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CC152150A0F720EC4DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.51.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:cc:15:21:50:a0:f7:20:ec:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6e9deee1-26a5-4ee8-81ff-59bc9162e5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:86:57:fd:40:38:04:1b:17:ad:6e:b7:30:
ef:16:d0:83:ce:fa:e8:ae:03:38:53:4d:20:bd:20:
5e:5b:b1:d3:b7:85:2d:98:b1:04:b8:e7:62:98:8d:
33:9d:a4:61:78:39:5e:83:e5:04:b1:ab:ad:1e:11:
f4:f4:92:14:8f:93:9f:fb:37:2a:2a:2b:e7:ae:4d:
a7:45:51:0b:c2:0d:fe:7c:9c:00:b1:9f:1d:3c:34:
ab:10:75:67:8e:30:98:f6:96:7f:67:93:74:7e:e8:
3c:31:d6:06:35:24:17:e8:d5:fa:81:dc:76:0e:fb:
f9:bf:2f:b7:da:a2:39:83:d3:cd:7b:1a:83:cc:98:
63:19:4a:88:39:02:0f:17:d8:84:74:6f:37:d6:3b:
18:a0:fd:1a:1c:b5:74:44:80:77:1b:60:2d:c7:5f:
18:30:70:c0:75:33:b6:18:38:34:72:41:1c:68:0a:
26:4d:80:07:0d:d2:33:90:d1:46:16:9a:89:8f:77:
c5:ef:ce:f0:d5:1d:2c:94:eb:3c:e0:3d:23:ee:50:
c9:c9:b4:33:70:3a:a3:cc:30:ff:0f:4a:25:ad:ea:
59:58:de:61:85:28:e6:e9:d0:a4:a7:9f:d2:94:b6:
bd:95:dc:50:7b:bc:6b:59:09:53:9d:df:88:7d:67:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:95:86:CF:37:0B:4B:D7:9D:11:C3:1A:AA:F6:F2:48:D0:3B:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.51.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:0f:71:3b:f6:1d:86:1c:48:40:ff:5b:4f:67:72:b7:d1:39:
3b:92:6a:d5:e8:3a:68:63:5a:8b:03:ff:dc:ac:6c:f5:ee:f6:
bc:ea:32:3f:ca:3f:ab:14:39:8d:ba:b9:22:46:15:48:97:2e:
d2:79:2d:12:60:f8:d6:43:18:0e:d5:d0:a6:36:ad:06:64:df:
d3:99:8c:88:4e:01:1f:9c:ff:7a:aa:c9:a0:57:45:17:cc:a5:
fe:f5:63:0f:64:b0:61:42:fd:e7:e5:a4:ea:b6:c4:1f:5f:cc:
59:dc:b0:df:d9:2d:57:db:2a:ee:d2:89:e8:5a:9d:76:32:f5:
3c:61:24:c9:f1:46:49:fe:32:3d:be:e2:2a:23:bf:ed:55:cc:
86:75:9c:7c:3b:c7:3b:31:a3:7d:f0:d3:9c:84:5e:a9:d9:cd:
18:ab:dd:7e:c1:9c:3f:96:46:d0:c0:fc:3c:2b:fb:1d:76:a8:
c9:b9:d0:ea:ac:ec:1b:63:02:9c:92:d7:a1:cb:c7:7e:fd:38:
3b:e6:e2:04:af:3d:9a:e2:ad:58:c5:46:3e:b8:80:5e:d5:d1:
4a:8c:90:d3:e7:a2:6a:88:7a:70:c0:11:f7:4c:56:26:f2:bd:
a2:07:77:fe:36:3d:92:d0:77:3d:78:3b:7b:d4:62:67:17:33:
54:53:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:33 2025 by rpki-client