Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9958d6e1-5f35-3320-a1c5-63fc1f63e092.roa
File: 9958d6e1-5f35-3320-a1c5-63fc1f63e092.roa (raw, json)
Hash identifier: nnXzj40DuEuXDVxxPnlCUN94hW9rLaSOUNzWvv1LnZw=
Subject key identifier: 11:5E:8A:CB:5C:FA:9E:EC:97:C4:29:41:57:8C:29:17:29:4D:E9:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CBD12BAEC6CE1112ADB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9958d6e1-5f35-3320-a1c5-63fc1f63e092.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.44.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:bd:12:ba:ec:6c:e1:11:2a:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d198e33a-0068-407e-9838-fd90930e497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:2e:37:42:2c:8a:db:6f:7c:34:70:a4:e4:
48:37:ee:fa:91:97:74:42:da:c0:5c:93:66:ac:85:
8d:c6:60:4f:fa:55:f8:42:14:12:66:79:6f:dd:0c:
29:49:bf:b9:07:51:be:79:20:d2:ef:4d:67:aa:12:
ee:ae:e2:4d:b7:e6:0d:74:e2:6b:76:9b:69:e3:33:
09:bc:9a:ce:76:8d:5b:f6:43:cf:5b:d7:99:94:9d:
04:b3:da:7b:1f:3e:87:a1:17:52:fb:99:01:96:9c:
b1:66:d4:3f:6b:53:5d:d6:b1:01:79:b7:df:3c:76:
42:be:16:15:1d:dc:fd:2b:34:e7:ca:b2:d0:1f:e6:
3b:ff:2f:b5:8a:8a:a3:09:2c:01:b0:f4:c4:7c:1a:
75:52:45:b5:77:38:f6:28:29:59:cc:fc:1c:3c:a1:
54:01:a8:09:59:28:32:00:60:41:da:87:ca:06:e5:
68:08:ad:1b:37:48:69:f3:5b:26:fa:20:76:00:c8:
7d:1c:66:a2:d8:d9:dd:f1:ad:2e:79:cd:1e:e9:e4:
b2:79:66:e9:22:13:4b:b9:91:fb:6d:6e:13:80:fe:
40:21:9d:78:c4:d6:69:69:cc:dc:6c:cc:a8:d0:2e:
1b:fd:57:ea:d9:bc:d0:a1:61:ca:33:7d:29:db:bb:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:8A:CB:5C:FA:9E:EC:97:C4:29:41:57:8C:29:17:29:4D:E9:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9958d6e1-5f35-3320-a1c5-63fc1f63e092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.44.183.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a7:95:8c:f7:19:18:e7:3b:10:23:03:d2:a7:99:37:a6:0a:
8d:3f:9c:e0:93:1f:6f:b7:42:6e:4d:b3:ed:71:8c:95:1b:8e:
1a:db:d9:bd:ea:b3:fc:16:e0:85:d1:6e:d3:5f:ab:c9:2c:8f:
92:f6:45:f2:c8:ea:6f:55:41:1e:2c:6f:3d:ad:43:14:fa:a3:
93:5e:90:f9:07:4e:2b:58:eb:db:6a:2d:00:65:8b:22:87:b1:
82:3e:fe:86:c2:ed:58:ea:92:6c:8c:3d:d4:c6:8b:52:a4:5b:
14:ab:d0:52:8a:1a:03:6c:c0:b5:00:0f:43:3f:d4:59:09:81:
88:35:4d:a6:38:85:65:d1:57:04:cd:da:fa:dc:61:45:5d:37:
c2:fd:9e:e1:a5:0a:66:20:e9:bd:5e:55:9d:f3:55:b5:df:3d:
31:6f:75:63:19:a5:83:39:be:34:b9:ee:53:a0:32:08:50:4f:
c8:f5:76:fe:5b:bd:12:03:1d:b0:c4:d5:ae:01:54:56:0b:bd:
32:c8:62:e4:c9:9c:65:2d:f9:cc:5b:12:2d:c0:8e:3d:cf:4d:
4e:16:a4:ca:7c:9d:4e:aa:bc:bc:0d:ab:56:2c:09:c6:4b:97:
09:8c:81:5c:6a:13:f0:88:e8:12:ff:dd:9d:b3:ba:a0:7e:49:
69:ce:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:15 2025 by rpki-client