Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/952b4a77-3250-3fbe-971e-cfc5de52fc49.roa
File: 952b4a77-3250-3fbe-971e-cfc5de52fc49.roa (raw, json)
Hash identifier: P5drHaRqgj4Q8fV9uWJ1+BAHz3OdaliZN82JUoALoWQ=
Subject key identifier: 1D:33:6D:E8:F6:1D:2F:A8:48:D2:57:32:17:B2:4E:47:1E:B4:E0:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814408DBB509B5CE6F7809EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/952b4a77-3250-3fbe-971e-cfc5de52fc49.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.40.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:8d:bb:50:9b:5c:e6:f7:80:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9f11780f-f507-433c-b9c3-324023b75d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:f3:fe:d4:96:0c:24:bf:73:90:6c:f6:2f:
76:c4:fe:10:fd:b0:d3:14:68:32:5b:13:ed:4a:e3:
16:68:a3:91:c0:38:22:db:cc:bd:fa:35:98:d5:b7:
5e:f7:9a:c3:fb:fc:8e:70:97:30:bf:92:dd:64:1d:
fe:d8:28:f9:dc:46:fb:3e:72:65:31:f7:4e:c4:6b:
36:4a:f7:e5:c1:e4:75:dc:9b:25:ea:14:42:1b:ae:
a2:58:2a:34:f2:a2:35:c4:bc:dd:65:cb:02:28:e7:
f6:ab:03:25:24:c4:58:fd:7e:11:25:ae:8a:c1:7d:
25:11:ce:36:fb:0e:45:1a:f7:2a:1d:bd:7a:ac:f1:
19:80:ba:f1:60:56:6e:51:11:36:93:4c:05:69:35:
af:7e:d8:d2:47:af:c2:74:d7:df:eb:54:37:dd:1b:
f4:4c:a1:20:83:9a:ef:e4:0b:6c:19:1e:1d:50:e5:
a0:23:2a:a9:50:da:8e:a0:d6:13:ea:6c:ef:06:70:
10:69:20:65:bc:25:d7:97:2f:47:f8:b2:7a:33:e8:
bb:46:a7:c8:d8:ac:77:ac:7f:a3:ec:b9:18:37:3e:
76:1c:a0:44:a2:19:10:09:60:12:83:1d:4b:42:58:
2c:b2:aa:a9:4b:b0:56:fa:82:57:56:84:1e:4f:6b:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:6D:E8:F6:1D:2F:A8:48:D2:57:32:17:B2:4E:47:1E:B4:E0:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/952b4a77-3250-3fbe-971e-cfc5de52fc49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.40.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:27:fd:7b:6c:05:73:80:c8:25:72:8c:1a:4f:a0:68:1b:7d:
99:6e:fc:4a:80:d0:70:c6:f8:6e:42:be:d8:fa:80:d7:43:06:
c3:9f:8d:2f:30:9d:6f:29:4c:67:73:b9:81:52:4b:a5:0d:cc:
9c:c5:e2:d2:81:3f:6a:c9:2b:5d:85:d1:db:0f:31:60:5c:20:
16:71:da:90:eb:1a:e0:48:25:62:d6:b4:0e:0a:40:ec:d7:3c:
12:8f:5f:1b:0d:59:5f:49:a0:cd:90:64:25:97:19:0a:dc:54:
47:ac:6f:c8:d8:8a:8f:57:40:9f:01:dc:15:b2:68:90:4f:d5:
5f:ae:78:64:2c:ce:27:c6:84:8a:bc:b2:e9:b4:24:fb:5a:d8:
34:03:b3:25:e7:94:7a:5c:6c:2b:2f:c6:7c:e5:b9:84:11:5a:
5b:57:0a:25:0a:e3:ab:63:77:84:8c:39:39:c8:ca:af:b1:7b:
18:3e:8c:86:d7:1f:a3:2a:bc:3c:18:f1:78:03:69:e5:fa:14:
9b:23:74:4b:85:0d:b2:c5:10:eb:71:79:00:61:2c:d5:4d:54:
0d:35:17:dc:bd:02:d0:26:4f:9d:16:fa:b2:ba:70:90:22:bc:
75:a5:ad:0a:8f:27:12:89:c0:69:6f:2b:b6:1d:67:4b:bc:40:
49:56:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:36 2025 by rpki-client