Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba3e91a-f5d5-3d0d-875a-f6510110335a.roa
File: 8ba3e91a-f5d5-3d0d-875a-f6510110335a.roa (raw, json)
Hash identifier: 3aLGEd6WNwEPpQj0K4WQ4qYJkNzb8r/W6Tpwrn+oaig=
Subject key identifier: E4:20:45:6A:89:93:F1:DC:54:F0:35:DF:F5:FF:E4:00:E0:3D:2B:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FA6C573756373C2DC6F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba3e91a-f5d5-3d0d-875a-f6510110335a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.250.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:a6:c5:73:75:63:73:c2:dc:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1a4035c8-2a9e-44c3-a09b-a960a4a411fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:b8:42:45:69:9e:1a:5f:91:86:bb:49:95:
8b:c2:51:9a:f4:15:a2:e2:8f:11:b5:f1:4e:35:64:
41:bd:c5:23:65:d1:73:6e:33:38:14:a3:40:d7:f8:
8c:79:1e:f8:9f:e0:c5:59:1a:24:fd:d7:5b:ff:94:
88:78:1b:a1:26:92:bc:1d:e1:a6:e4:62:fb:93:53:
e9:84:75:b0:df:f5:78:0f:1c:1a:70:dd:0c:0f:ac:
57:b9:1b:f2:40:d2:ad:44:8a:00:20:a3:3b:82:56:
b3:f3:43:43:7d:70:dc:92:1d:57:cc:99:77:41:dd:
b9:3f:9e:f4:28:e0:5f:1e:79:05:45:cc:0b:05:13:
4f:02:72:6d:75:55:1e:12:50:29:bb:60:51:16:af:
cf:4b:ac:a8:b1:c7:4c:db:70:8c:b8:4e:c1:83:70:
94:00:c9:64:4f:c8:84:a4:7f:e8:0d:40:36:80:6e:
96:70:19:d2:ae:7e:c7:3b:15:3f:f1:41:10:78:39:
71:12:57:96:65:78:c1:03:b5:4b:55:c4:d8:f5:85:
3c:6d:8f:ec:04:c5:92:28:84:70:f4:0b:bc:fb:90:
d7:98:22:46:0d:83:19:0a:b7:c2:d5:73:bd:92:f6:
05:4d:b1:9a:58:ca:23:21:4a:3c:21:29:63:09:27:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:45:6A:89:93:F1:DC:54:F0:35:DF:F5:FF:E4:00:E0:3D:2B:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba3e91a-f5d5-3d0d-875a-f6510110335a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ad:87:68:65:57:ef:ea:b5:27:40:f6:bd:47:d6:2a:65:fc:
03:c0:9f:11:a1:c4:4e:f8:d0:3f:34:e1:46:44:38:96:6d:35:
d4:e2:34:9e:b1:39:6a:ed:72:87:fc:7f:ca:08:3e:28:d8:6e:
f7:b3:0c:9e:d0:1f:39:b7:8d:47:7a:37:72:f9:12:57:73:80:
c4:66:81:44:44:26:62:b4:4a:4f:78:34:5a:74:29:53:de:a9:
ea:25:c8:0c:34:79:c0:63:67:6a:51:f3:65:b5:c8:19:aa:0a:
d7:97:d2:25:d3:32:dc:27:45:8d:76:88:36:07:f4:0f:cb:f2:
8c:3d:1c:ca:7e:ca:3b:b6:fa:85:ec:a9:c0:be:f9:b5:89:64:
1b:9b:9c:48:c8:a0:98:a0:12:24:c7:b0:c7:5f:8e:65:83:e8:
86:18:01:59:03:af:6e:a3:e0:3b:b4:4c:8b:c5:84:32:57:e9:
2b:de:e1:6f:95:ba:d1:f4:41:ef:ce:af:dc:ab:08:0c:b1:ae:
5f:2c:57:37:71:7d:84:7f:a3:c3:37:68:b7:b9:3e:00:f5:d8:
5e:a8:a0:df:b3:99:ec:83:a9:df:e2:9e:b4:07:13:db:d6:47:
2e:9b:29:60:02:e1:aa:85:e6:cd:e0:e0:93:c1:4d:61:97:35:
fb:f1:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:37 2025 by rpki-client