Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa
File: 7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa (raw, json)
Hash identifier: rozDwDDUkd+W79Cs2CkKGwNsBDck6sGeqnzZRzWiQdg=
Subject key identifier: DB:F1:DF:9A:DD:46:36:81:48:7E:C3:2D:A3:33:85:41:2F:8D:4D:17
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130ABA59A15B902EE26200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.32.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:0a:ba:59:a1:5b:90:2e:e2:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=089a5a75-8c94-4b8b-9831-a07f7f27d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:85:35:e1:cb:50:25:76:27:ab:9d:cd:2b:
98:59:e2:bb:c9:8e:d1:d1:3f:f4:06:29:36:53:75:
c8:aa:2f:55:19:c0:ef:25:74:6d:7a:e9:3d:bf:31:
09:e2:13:19:f0:c2:db:9f:ad:c3:18:f0:7b:5d:08:
5b:06:c2:84:2a:90:00:11:df:7c:cb:15:3b:fb:96:
b9:ec:bb:d1:3e:c3:23:41:b7:b5:a7:fd:59:01:d5:
10:e8:7d:ab:2f:60:ec:eb:e6:8e:fb:94:2e:88:c5:
96:ef:9c:e2:90:89:62:e8:b3:0f:b1:d6:cf:bf:d6:
36:ea:3f:2c:9e:30:cb:d7:9b:22:82:7f:2e:dc:8f:
78:5c:3c:6b:e3:a3:f9:40:1d:73:f5:c5:a0:d9:f2:
66:46:7c:5f:3a:4c:9b:fd:15:9d:49:b9:24:d9:e5:
af:13:1e:ce:94:17:eb:89:dd:7f:5c:4a:01:58:d5:
55:10:21:50:15:98:73:26:c1:24:93:1e:9c:8b:83:
51:40:e2:71:85:0d:77:9e:92:8a:68:d2:5f:35:ec:
c1:da:c8:ad:05:9c:8a:6f:a9:0e:55:aa:ec:0f:47:
0d:db:aa:0b:b4:2e:87:6e:2d:9b:42:93:19:77:9a:
cc:3e:12:7f:69:69:e3:f9:a2:39:ea:81:57:79:9e:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F1:DF:9A:DD:46:36:81:48:7E:C3:2D:A3:33:85:41:2F:8D:4D:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.32.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:1a:da:f2:da:22:26:c7:03:9f:66:a7:95:f3:af:c9:64:98:
c6:30:9d:8c:db:f7:f1:e6:a1:7e:fc:11:bb:7d:cd:1a:95:91:
cb:33:17:48:c6:64:8e:c5:36:45:81:06:02:b0:0e:ab:44:78:
0d:11:bb:82:75:e5:b9:37:b4:48:3c:25:a9:2c:4a:09:b9:6a:
e8:7d:dd:ac:1c:fd:aa:ca:14:be:c5:fe:21:94:c9:be:48:c5:
08:9f:38:c4:80:30:d9:59:98:e2:04:6a:f2:0a:4b:02:88:1c:
4d:82:31:52:85:86:97:d7:dd:b0:2d:73:ad:03:cb:91:92:c3:
76:2c:e0:b9:ae:4a:ac:90:d2:1e:09:7f:53:f5:bd:ae:dc:64:
4e:13:e0:6a:69:06:a2:9f:25:4d:76:69:57:80:27:87:9a:cc:
1f:d9:f9:0d:6f:e5:70:da:3e:ca:14:6a:5b:86:a9:4f:d6:cf:
f8:24:fb:b4:7e:41:2a:a5:b6:97:41:0a:fc:8b:9d:84:1d:63:
85:84:5e:06:72:fd:88:6b:c3:e6:cb:88:90:e3:20:bc:06:cf:
ad:2d:09:ab:a0:00:82:27:6f:07:57:01:64:3a:a9:da:a9:d2:
d1:59:75:3c:9e:2c:76:9a:ff:1b:81:e9:4b:9d:fb:60:73:6d:
40:84:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:26 2025 by rpki-client