Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85a1297c-2bf1-332a-916a-57f701a2a34a.roa
File: 85a1297c-2bf1-332a-916a-57f701a2a34a.roa (raw, json)
Hash identifier: AB+BpUT3fSZ3PZaqttygr9RiWZWHcAgenFmnsRUZcRE=
Subject key identifier: FC:B6:F8:E0:2F:56:A1:1A:37:35:85:3F:14:84:F6:7C:9E:40:89:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11C20E49207C08C5B832C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85a1297c-2bf1-332a-916a-57f701a2a34a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.33.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:c2:0e:49:20:7c:08:c5:b8:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7b36a19b-b731-4b3e-a1a4-1c6eb86f6b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:40:2c:f8:33:64:a9:22:87:05:93:85:20:
e4:12:d9:a3:3f:fa:36:dd:19:86:aa:8c:73:00:ea:
9a:99:63:c5:b8:80:64:a4:b1:5b:8f:74:f3:ff:9d:
b0:83:03:90:1d:ea:ef:fc:c2:2e:d4:b0:c0:e6:d0:
a0:6a:39:24:3c:b9:bf:8d:e7:72:1f:d2:bf:96:5f:
32:c3:d6:bd:0b:4d:82:c3:55:e8:0c:25:d9:fc:23:
71:34:e5:1c:4b:cf:5a:8e:61:3f:69:2e:07:0e:11:
d0:54:84:eb:3b:58:ed:0d:24:5d:95:c1:c7:dc:af:
ea:25:92:c5:d0:0b:02:14:a8:77:b7:7d:51:ba:16:
d4:53:62:c0:6a:47:63:e7:72:9e:0b:03:d8:fd:a8:
98:c2:d0:a5:d0:a0:92:24:1f:45:45:b7:41:3d:68:
39:f9:47:91:2e:2d:47:47:81:f2:f1:9f:7b:3f:39:
1e:58:3c:4d:93:b3:b5:95:0c:a2:2f:b0:9e:4e:83:
2c:95:ec:20:eb:88:6a:02:1e:2b:c4:f1:96:5b:af:
84:8e:9e:15:3a:7f:5c:f6:78:65:21:25:17:11:5c:
93:01:7c:23:1a:c8:c7:11:50:8f:3a:f0:3c:ce:42:
33:f5:61:05:46:7e:b4:43:d0:03:48:4e:42:16:26:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B6:F8:E0:2F:56:A1:1A:37:35:85:3F:14:84:F6:7C:9E:40:89:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85a1297c-2bf1-332a-916a-57f701a2a34a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:49:04:2f:f7:d3:34:45:6e:b6:03:ea:d2:2c:35:5b:74:8b:
9f:e3:ef:97:d9:9c:a0:3a:30:83:0e:6d:70:30:4d:43:b9:ff:
18:6c:3e:4f:ce:64:a7:5b:31:a4:f3:a5:14:f6:ab:ef:64:00:
8b:b9:9c:be:fe:f7:8f:6e:d7:32:05:8d:f6:fe:3d:c2:09:d4:
64:a8:7b:c2:49:34:68:f6:d9:9c:e8:98:27:23:c7:9a:a5:c2:
a3:75:3d:67:08:59:67:4f:b4:39:2f:40:08:18:b1:7b:59:2f:
65:05:45:35:d2:96:4e:93:08:c3:e4:65:42:ee:67:60:44:af:
7a:a4:8d:62:bb:d8:89:69:82:fa:d2:38:29:d4:95:d2:9a:8e:
eb:53:17:6b:51:70:ea:84:ba:ba:16:ec:09:2b:3e:7a:35:e1:
0a:2e:1b:f5:0f:5b:8c:ff:63:46:f7:60:98:61:84:4d:e6:1a:
29:b0:44:d0:0d:05:81:25:4c:74:72:0e:c7:fb:0c:ac:01:86:
6f:88:87:15:32:5e:7a:fe:d2:0f:18:c4:e5:5b:ed:87:94:0d:
97:c6:aa:81:a9:be:c3:1e:fb:0a:7a:90:f4:92:af:16:a2:b1:
73:9d:73:c6:b1:c7:6e:60:84:2d:c7:e0:9f:00:0d:ea:f4:5e:
4d:38:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:01 2025 by rpki-client