Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74f6affa-7884-33b1-9ddd-7d7226099c10.roa
File: 74f6affa-7884-33b1-9ddd-7d7226099c10.roa (raw, json)
Hash identifier: mpNyQAh1rlK1ddIOYmoit7UXMwNsak92xwvFM8CkqBM=
Subject key identifier: 21:FF:B3:1D:94:0F:FA:53:CB:0A:B0:1B:51:79:33:36:30:1E:DB:94
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1523042622B3B25852B700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74f6affa-7884-33b1-9ddd-7d7226099c10.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.35.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:23:04:26:22:b3:b2:58:52:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=400526db-b868-4d2d-bea0-c9018927b140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:e8:8f:65:ce:a3:f7:a7:7a:3d:09:43:10:
23:b7:4c:d3:6c:d5:06:71:a4:f2:55:d3:4e:93:4a:
4c:95:42:90:70:08:44:7d:bd:ad:4f:64:a3:62:85:
50:ca:29:67:6c:42:9a:1e:83:89:85:85:7c:6f:a2:
a5:3a:ba:3a:7b:37:7d:91:94:ed:94:97:43:fb:80:
9d:bf:34:d9:26:66:cc:73:06:fd:b6:e5:c0:29:11:
99:a1:8b:06:20:05:18:e8:65:cc:07:9e:7d:ad:35:
00:5c:9b:af:8b:1f:82:2d:83:35:e7:f5:f9:b9:11:
6e:87:58:22:2a:4e:7e:e2:8d:b2:e9:0a:65:7e:52:
73:56:77:11:eb:28:56:cf:9c:cc:0b:ae:b9:a0:a1:
71:ff:c3:5a:bd:77:c0:5f:cc:95:64:2e:1e:7f:4b:
54:3a:12:e0:4b:75:c9:1a:27:50:95:07:16:1d:9e:
58:db:fc:2e:6d:65:b8:6a:67:72:0b:52:5b:34:50:
bf:c7:cb:be:e4:07:84:97:2f:59:46:94:51:a2:44:
04:04:16:5b:91:1a:47:a2:42:6a:10:9e:74:b6:a6:
dd:34:20:7e:c2:c7:d8:cf:b8:9f:9a:6f:81:63:85:
4b:38:17:66:63:7e:4e:19:1b:6b:4f:40:82:b0:6b:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:B3:1D:94:0F:FA:53:CB:0A:B0:1B:51:79:33:36:30:1E:DB:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74f6affa-7884-33b1-9ddd-7d7226099c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.35.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0c:96:84:38:c5:34:10:28:bf:c6:55:c8:c3:4c:87:42:14:
5e:59:60:05:6b:ee:4c:5e:60:bf:45:ee:74:10:4b:47:8b:c7:
7a:c0:46:1b:cc:d9:fc:df:86:a8:47:23:1b:f3:cf:57:b1:ad:
08:d2:3b:19:f7:0f:03:7a:fb:fe:b9:6a:b6:aa:8c:f2:94:76:
59:c3:9b:c2:26:8c:5b:24:fe:08:92:9d:0b:8f:4f:db:16:fd:
f0:2e:7b:1d:ca:26:f7:80:fd:50:2d:53:71:89:29:ca:ee:7a:
fb:6c:0b:a0:5d:28:be:a4:0e:95:9f:a5:d3:c0:7c:17:45:d8:
09:c7:1f:e1:4a:4e:dc:97:8a:e6:86:3e:fd:a2:3d:e7:e5:66:
13:40:3b:e4:84:f5:fd:89:db:8f:e8:18:fc:ec:42:02:55:d3:
8b:5a:c2:06:10:2b:8f:cd:31:44:a1:6d:18:2e:82:75:9c:b5:
52:1e:c8:3d:c7:f9:84:08:ed:d6:90:3a:46:0a:be:24:00:22:
93:81:98:1f:fc:7c:b6:0c:32:32:77:a8:17:52:5d:43:9d:c4:
fa:03:62:3c:6f:e3:84:ac:3e:f9:be:13:2d:4a:fc:63:01:8d:
39:3d:d3:2b:25:85:71:c9:31:8c:26:a7:65:a4:65:d9:a6:37:
d2:3b:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:08 2025 by rpki-client