Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/857a59c8-e786-3d73-a7b1-637415dbc157.roa
File: 857a59c8-e786-3d73-a7b1-637415dbc157.roa (raw, json)
Hash identifier: WFvTrGo9bsqZk1u0phRDbWwP/QVWuhdnH35Zl1L3axA=
Subject key identifier: AB:DE:79:D9:49:2A:72:7C:0F:4C:CA:4B:18:E9:93:66:A4:10:99:DB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CBA9539B8229F0EE40900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/857a59c8-e786-3d73-a7b1-637415dbc157.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.44.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:ba:95:39:b8:22:9f:0e:e4:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=145ae8fb-bbe1-47a2-a0dc-1356fd8b9fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:a0:21:44:8c:c9:7b:f8:b9:aa:7c:82:82:
12:48:9b:9d:71:cb:fa:d7:b2:65:e8:f1:3b:ff:e9:
ba:f7:43:bc:8b:c1:37:8a:55:8b:19:a5:38:db:8b:
16:f2:36:cf:41:7e:e2:72:7c:e9:ee:25:e4:5a:fa:
f9:5b:78:c1:39:38:3d:0b:cf:48:ad:98:3e:2f:49:
58:b6:da:ec:f7:dd:44:aa:66:72:d3:54:8a:f8:f3:
92:a7:57:30:d1:f8:19:7b:7a:4d:6b:c9:76:e3:68:
61:e8:1e:c9:b5:97:8f:e1:27:21:2a:aa:ff:d3:87:
36:f6:62:0a:30:e8:5d:fa:31:b9:2a:5d:83:1b:c4:
89:c6:02:0d:e4:13:e0:a6:f9:0c:de:3b:a6:99:3c:
71:97:9f:3c:fd:3a:71:3d:64:e2:d4:41:cc:4d:f3:
43:70:8e:83:9a:2f:f1:71:08:67:6d:93:ca:56:c9:
9a:93:1b:40:b4:07:95:4c:7c:08:b5:73:f1:34:d3:
49:aa:29:3d:02:73:57:a3:fa:49:65:ef:65:c4:6f:
22:63:7c:20:e8:0c:d0:1d:43:2b:35:bd:fd:2a:2a:
90:39:dc:a4:50:3d:f1:52:03:33:7d:8c:f0:46:95:
c7:d8:d0:bb:b8:42:36:df:ec:82:c7:04:c0:b1:44:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:79:D9:49:2A:72:7C:0F:4C:CA:4B:18:E9:93:66:A4:10:99:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/857a59c8-e786-3d73-a7b1-637415dbc157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.44.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e7:14:ce:9b:96:ca:01:41:a3:61:79:38:99:45:eb:d9:0b:
59:f0:2e:b1:47:d8:3d:3c:12:ea:50:50:1c:4d:52:9f:48:6a:
27:05:62:61:39:1d:9b:35:4d:f1:fb:63:d9:66:3e:d3:4a:b6:
49:78:b1:5d:da:91:63:27:59:cf:4f:5d:b1:42:29:53:19:43:
d5:6b:5a:90:1d:58:31:71:ef:81:6e:51:bb:b4:66:a4:62:fb:
ee:91:78:c0:20:ec:b3:eb:74:df:55:a5:ab:3a:f8:70:7c:e5:
ae:44:fb:5e:10:55:95:cf:bc:b5:33:ed:9e:93:7e:e6:3a:cc:
71:e4:94:47:e6:82:f9:cb:c2:26:ab:b7:28:43:b7:3f:68:24:
e9:4b:12:8d:c8:37:7a:70:38:ac:39:b8:2d:06:ec:bf:99:97:
b6:3d:ad:ef:3e:ae:6d:a1:fe:c6:88:57:7a:8a:86:38:5d:2b:
e2:f9:60:91:dc:51:d8:47:69:22:00:ac:b3:e1:89:f2:bc:c4:
26:d0:ae:c6:ee:ca:a0:65:9a:69:33:9e:44:ba:7c:0f:e6:e6:
35:1b:2b:1f:cd:29:db:44:3e:0b:9f:ca:42:cf:d7:bb:f2:73:
fe:55:06:b6:c6:8b:96:83:b9:be:d6:da:94:f9:6b:66:ee:e6:
95:77:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:24 2025 by rpki-client