Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9054dc6e-a5e3-384f-84b3-ca2ded81acac.roa
File: 9054dc6e-a5e3-384f-84b3-ca2ded81acac.roa (raw, json)
Hash identifier: JCBe+L/icnlLDmagl9ddbZxGwUt0EBu7uzM8JjeEMi0=
Subject key identifier: 95:E2:14:1B:D2:DC:2F:96:49:68:4D:A2:BA:1C:EE:8F:F9:13:D7:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11BC2CE5D0E57D564B0E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9054dc6e-a5e3-384f-84b3-ca2ded81acac.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.207.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:bc:2c:e5:d0:e5:7d:56:4b:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d50ce8ec-b4af-4d1c-8bcd-988edcb748ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:a4:17:3c:12:58:6e:2d:66:53:ef:ef:df:
f0:4b:50:fb:a2:b1:7e:ca:94:5a:a4:39:eb:ed:56:
90:0c:e7:bc:83:f0:56:77:aa:6a:7e:7e:17:2f:ae:
2e:72:32:ce:27:9b:15:68:b8:ce:be:c4:1e:3c:1e:
58:38:53:60:fa:c6:55:db:89:e4:ca:15:2e:8c:95:
e3:c4:ad:70:dc:eb:00:96:7a:ad:f1:7e:6a:83:63:
f3:70:c3:c8:60:91:01:f3:bc:90:5d:c1:02:4a:80:
93:ab:80:1c:41:e1:de:3a:b2:8e:95:a8:d8:2b:b0:
4c:af:4b:9b:1b:7b:00:27:d4:10:3e:9a:bf:56:53:
12:c1:61:b3:8b:05:83:f0:55:c2:c5:d8:aa:eb:8c:
0f:71:fa:f4:49:17:09:9d:61:be:ba:30:8b:10:d0:
f4:81:91:ea:4b:d6:ac:eb:e5:3f:39:fa:e1:f0:2e:
4c:cc:c5:33:33:85:8c:ee:6b:58:c8:19:3a:d3:ca:
1b:d3:16:c8:14:bb:dc:f2:8a:61:cd:45:fb:0e:9b:
4e:70:28:9d:84:72:98:92:d6:4d:eb:1b:9b:56:51:
76:4c:f2:e7:b3:bf:1b:93:a5:19:75:7f:52:89:52:
4d:4e:e0:bc:68:51:33:18:af:01:98:fd:d7:62:91:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:14:1B:D2:DC:2F:96:49:68:4D:A2:BA:1C:EE:8F:F9:13:D7:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9054dc6e-a5e3-384f-84b3-ca2ded81acac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.207.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:02:0b:0c:50:0b:8a:1b:4d:05:5a:20:0f:6f:28:b3:b7:05:
b9:7b:08:e0:0a:87:fe:a1:8a:44:82:46:6a:94:90:bf:c7:14:
23:cf:37:1a:49:2a:26:50:0a:78:98:ee:6a:25:bb:6a:67:82:
dc:56:79:d2:55:04:4e:c4:65:c3:74:7f:dd:10:b7:1e:c6:fd:
c7:8b:3f:fe:8f:97:38:bd:9c:26:b7:52:22:bf:0b:2a:97:dd:
f0:67:20:18:dc:14:cd:2f:6f:c8:bd:e9:90:2b:5c:69:29:58:
f5:47:ad:1e:e0:31:32:2f:1e:d3:42:fb:94:64:52:ac:7e:bb:
f8:a9:fe:3e:1f:35:70:f6:4f:7f:45:43:ab:f4:18:13:81:bd:
ca:a9:62:7d:ec:bd:ba:b0:a0:b1:70:f3:66:46:bb:2a:3e:14:
6a:78:cc:53:91:10:58:54:bf:8a:f5:c2:68:f0:df:10:4a:a6:
a6:92:1a:1b:71:18:4e:45:2d:6b:3f:69:9e:05:9f:02:3d:48:
96:de:bd:06:91:44:30:24:3b:2b:7a:c4:56:dc:56:2d:fa:29:
bb:6c:c5:bc:fe:dc:15:33:f2:16:95:4c:a8:69:70:19:45:80:
fc:37:87:ae:64:bf:01:34:4b:8a:9c:7d:b2:74:ba:d8:15:be:
44:c1:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:57 2025 by rpki-client