Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b1c78ae-dba7-3c89-af28-f3608b11ee6c.roa
File: 8b1c78ae-dba7-3c89-af28-f3608b11ee6c.roa (raw, json)
Hash identifier: l8Be4tQm3csxUuWVQh1tbHu1sGqB9Cd8eUjEuA16tus=
Subject key identifier: 65:14:CE:6D:15:6A:04:A5:FA:E5:DD:6F:6C:B3:31:48:2C:C9:7A:C5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FA0AA92913BC869AE0700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b1c78ae-dba7-3c89-af28-f3608b11ee6c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.243.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:a0:aa:92:91:3b:c8:69:ae:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9da85ac4-f750-462f-a2e9-c69c722292b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:da:f1:38:09:35:24:6a:02:df:fc:de:bb:
ae:58:bf:70:f6:b4:d6:c0:48:de:d0:ec:7f:98:71:
ad:44:5c:0d:ce:45:4b:da:eb:32:2f:94:0f:d1:48:
6d:0f:08:65:be:ab:c7:e0:07:b9:e8:bb:7e:eb:c9:
19:68:bd:53:c7:08:d2:b0:d9:90:3b:6f:84:bb:9d:
6c:9c:4d:3c:6a:6b:94:f1:8f:83:2d:df:7b:d3:72:
00:93:96:41:17:30:bb:bf:2a:c4:09:9d:70:48:12:
02:ce:c3:45:4d:06:b6:9d:9d:77:96:05:aa:c3:aa:
43:af:90:06:37:16:f1:09:39:80:11:ba:c0:19:0f:
be:1d:fb:73:91:74:dc:92:30:4c:47:2d:30:f4:84:
01:0f:d5:05:ad:15:e2:6d:9d:9c:06:ff:97:30:95:
92:0c:0b:73:25:07:d4:1f:42:39:cf:4a:a2:e9:77:
b7:72:1d:63:59:da:bb:ff:82:88:13:ca:10:25:c5:
fd:74:1d:b2:a7:38:59:ba:8e:6d:96:6f:e8:13:46:
ff:a0:a2:c0:ca:4e:3b:a6:14:56:be:2f:d1:c9:f9:
e1:02:70:f4:b8:76:46:4e:11:6d:8e:fb:bf:ee:87:
57:08:3a:74:e3:e3:4c:d3:c2:4a:0d:79:06:22:52:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:CE:6D:15:6A:04:A5:FA:E5:DD:6F:6C:B3:31:48:2C:C9:7A:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b1c78ae-dba7-3c89-af28-f3608b11ee6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.243.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ee:c6:a7:19:6b:d3:80:c1:68:8d:d8:33:96:bc:ca:2f:f5:
ba:1f:12:fa:06:f7:2c:95:aa:2d:75:54:cd:1d:ae:9c:98:02:
e3:94:ba:9d:8c:2f:de:eb:36:e8:6f:95:38:f2:17:b0:44:f0:
ef:90:cb:9c:c6:8d:7c:1e:ae:97:e5:5a:4b:46:9a:6d:b0:7e:
58:7d:d8:ab:1e:82:1d:bf:f3:37:80:49:d9:a3:d2:9e:8e:ed:
dd:c0:ec:6e:ab:b7:23:69:92:38:40:a0:0e:80:c2:71:fd:96:
66:cb:43:e6:c8:f2:5e:0c:eb:f7:f6:b0:d0:de:16:95:24:6a:
3d:74:6e:89:67:8d:9c:74:a0:65:71:87:83:09:b9:b0:0b:59:
7b:85:9b:60:11:28:af:09:65:f0:23:e5:df:fe:20:79:a9:b4:
87:78:7f:aa:54:b2:54:64:7b:8e:c3:31:07:c5:5b:e1:bd:3e:
77:c2:db:59:cc:9e:6b:aa:10:b5:94:89:3a:1a:68:9a:93:eb:
16:0c:d7:cc:c3:f1:6d:42:d8:9c:91:1d:19:d8:bf:96:08:22:
54:22:01:2f:9c:ea:d2:5b:14:10:7a:7a:c5:13:9f:21:48:88:
c1:af:af:16:20:d5:c9:51:fc:44:64:ac:38:dc:b6:77:84:d4:
c1:3e:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:27:10 2025 by rpki-client