Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b02be-ee50-3f1e-aa41-e23f9881990c.roa
File: 933b02be-ee50-3f1e-aa41-e23f9881990c.roa (raw, json)
Hash identifier: zhr5EQ9/oU7XV2TsX2som8J6yMBt2o3iN20pljuxwp4=
Subject key identifier: CD:C6:36:16:ED:ED:94:5F:41:B0:27:0B:E6:58:2C:10:71:63:56:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7F3135DFD97661784100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b02be-ee50-3f1e-aa41-e23f9881990c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.209.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:7f:31:35:df:d9:76:61:78:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=41324fc9-e6ae-4976-9f67-7f6f3bbba857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:e5:69:ac:4c:c8:45:05:25:5c:00:e5:a8:
ca:4e:97:6a:42:9c:63:7c:15:4e:b7:70:4e:94:63:
8b:ab:f9:fd:76:f0:c0:9a:08:f3:8f:48:c8:6e:3b:
ed:4d:49:7b:de:31:80:3c:0e:56:39:c9:61:6b:cb:
3b:28:14:db:2f:50:b3:7f:5e:92:10:b8:62:10:4b:
b3:ec:ae:06:8f:60:8c:71:70:16:af:1f:97:9f:f4:
08:3c:05:a5:18:22:7c:5e:23:e1:6d:e4:ac:7c:41:
36:7a:7c:fb:12:ef:be:a7:48:e5:f2:1d:01:74:aa:
64:89:26:2e:5c:cb:3b:3f:9a:66:d0:44:e3:96:7c:
68:5f:f3:79:65:1a:f6:bb:c1:71:8e:05:a9:50:3f:
24:05:49:61:7a:92:a6:75:18:dd:b9:eb:4d:19:0d:
17:a9:00:8b:67:cb:ac:b2:13:19:27:6f:ac:f5:83:
ff:33:6c:30:5b:2c:1d:0b:ab:a7:2c:38:b8:01:c3:
20:5a:d6:19:ee:d3:4a:a2:c2:9d:98:6c:ec:e8:62:
ab:9e:f3:1b:62:7d:f2:2b:ba:3d:a8:fc:f4:ae:bd:
fa:d0:c0:27:63:e2:69:21:a6:77:78:17:84:9f:92:
fa:bd:22:43:68:54:4a:03:1c:3d:97:f3:fa:0f:0b:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:36:16:ED:ED:94:5F:41:B0:27:0B:E6:58:2C:10:71:63:56:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b02be-ee50-3f1e-aa41-e23f9881990c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:34:57:91:b4:7b:f6:d6:82:5f:cc:d6:58:f1:5c:6a:bb:3d:
4f:50:cb:f8:3e:f8:0a:58:0d:a2:e6:37:1d:21:48:13:9a:ac:
87:39:13:fe:c2:b8:a8:1a:94:df:3f:2b:e7:a0:bb:e8:74:08:
65:98:c2:49:73:0a:27:3c:b3:49:1a:a9:b8:03:07:db:37:8f:
a4:fb:7c:bc:3d:6c:a9:41:56:96:44:3b:b5:ab:a7:a3:ac:d0:
de:78:16:e5:73:7b:92:40:f2:d1:ee:da:38:38:ce:08:94:f2:
43:46:ce:f3:cc:dd:ca:75:8b:f7:91:1d:77:2f:7f:85:93:f7:
5d:18:47:72:c7:c4:28:cc:73:d8:7a:83:58:fa:30:54:93:ec:
10:1b:1a:55:15:65:5e:5e:fc:12:d4:fb:c0:d3:39:46:0b:ae:
78:fb:34:52:e3:a6:2d:27:15:91:03:a4:8c:10:6f:4e:0b:c6:
be:40:a6:f9:3e:28:20:27:8e:c4:10:1c:63:a3:a7:d2:99:b3:
dc:80:27:80:2f:35:66:09:98:de:c5:84:47:ab:b4:03:97:8e:
2f:d6:df:f8:9c:2b:6b:23:b1:cb:21:67:ef:00:74:18:3f:fa:
71:88:e2:9d:c6:14:a1:83:36:d8:4a:7a:b9:c0:79:6d:9b:ff:
46:5b:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:46 2025 by rpki-client