Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/961b7c87-aa43-3726-b606-cd40b5bcc443.roa
File: 961b7c87-aa43-3726-b606-cd40b5bcc443.roa (raw, json)
Hash identifier: XUbJ3Bo3q0iP9f/685971HUlijwOlTzSjWHsHxSunps=
Subject key identifier: A0:D4:F8:D0:63:A5:75:7C:D4:DA:BC:0C:DB:85:07:EE:B9:10:EB:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B8630DA6CBB3FC8C70C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/961b7c87-aa43-3726-b606-cd40b5bcc443.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.250.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:86:30:da:6c:bb:3f:c8:c7:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ea1b97a8-c353-4d69-a4ab-2351ee862ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:8c:bb:f3:16:86:d0:d1:04:d2:c3:27:ab:
35:f3:23:cf:32:bc:38:55:ec:71:1a:0e:75:7c:8b:
12:63:07:de:fd:21:cb:bc:be:ec:98:90:44:31:c4:
15:61:70:f9:bd:78:c3:d7:f3:62:96:60:de:9e:73:
b8:05:17:c8:bd:8e:41:74:64:63:aa:35:08:67:de:
27:1b:89:1b:6e:bd:2b:79:f8:c5:6a:1c:4f:6a:f2:
f9:42:69:df:d4:ae:76:4b:e5:fe:32:bd:7a:85:b1:
16:c4:4b:a3:9c:54:5f:e3:e3:6c:79:79:64:82:63:
c9:37:9d:45:87:99:b1:63:40:99:f7:33:5b:45:02:
38:5b:33:80:cd:1f:f5:e1:73:f4:9f:f7:16:4b:a4:
80:03:18:6f:2f:3b:cd:ba:2e:ab:98:f1:a1:cf:e5:
1e:e3:02:b7:be:b3:a5:ba:cd:ae:bb:73:ca:3e:53:
0a:88:40:94:37:bb:61:8b:f6:8f:63:2d:a4:9d:02:
08:3e:cf:3f:d4:d7:3f:fd:ae:c1:d5:bf:ee:ec:f4:
cc:47:e7:dc:fa:0c:43:64:89:c3:08:4b:4d:c7:c8:
08:57:7f:b4:9a:fc:34:72:52:00:49:27:91:cb:a2:
21:ae:b9:b3:fa:27:7f:a5:53:91:d3:1d:41:80:61:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:F8:D0:63:A5:75:7C:D4:DA:BC:0C:DB:85:07:EE:B9:10:EB:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/961b7c87-aa43-3726-b606-cd40b5bcc443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9b:71:e7:9e:ef:aa:21:6b:4a:55:24:6a:ec:7b:3a:fe:08:
d7:90:cc:91:b6:20:d6:6c:31:9c:81:38:c2:79:37:72:1c:18:
c5:30:f4:7b:0b:4a:36:27:b2:25:a7:20:43:a8:e8:a1:4c:6e:
33:29:d3:b9:c3:a6:26:c2:29:af:60:0a:22:ea:c8:e8:2b:2e:
06:38:e1:b1:02:16:62:fc:35:c1:b9:4b:cb:cb:6f:d5:2a:10:
c3:df:ec:ed:1e:a3:ec:79:68:c0:f9:97:c1:0c:14:5b:71:07:
19:d8:97:36:84:d2:66:6f:14:eb:0e:13:0d:17:31:e0:77:f5:
44:b7:ae:8d:7a:44:5e:06:78:ec:ec:0e:dc:c4:ce:ca:4e:d6:
8c:66:5a:00:24:0c:52:61:ba:a3:09:5f:05:1d:f2:67:6e:72:
ba:7e:d9:f9:cb:a9:dd:04:dc:03:f9:a5:cb:ad:32:e5:31:86:
cc:c9:8e:52:a9:46:7d:28:08:d9:fe:2a:51:f1:68:ad:2a:0c:
cc:5f:00:9f:24:19:87:79:f7:3c:ab:c0:c7:c5:04:22:c7:a3:
55:5b:58:bf:b7:0f:64:12:be:58:23:42:d4:1b:11:8f:30:76:
f7:47:bf:da:49:6e:21:f4:59:de:cf:61:29:c4:ba:81:1d:f4:
61:39:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:09:15 2025 by rpki-client