Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a3e3227-1e0b-3834-b593-32d92485e4a7.roa
File: 9a3e3227-1e0b-3834-b593-32d92485e4a7.roa (raw, json)
Hash identifier: HK0pGaOKYXzlWZDJdP5MEbBbNnD67+vaF6brgV/qISY=
Subject key identifier: BE:1B:F3:35:57:2B:00:A5:D3:A7:E2:38:A8:48:4B:65:A9:0B:6B:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C15382E79623682FF0C1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a3e3227-1e0b-3834-b593-32d92485e4a7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.42.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:38:2e:79:62:36:82:ff:0c:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5337f64f-91c8-461c-98fc-ef6904ee6a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:09:d9:21:0d:e4:96:b1:10:da:fd:a2:79:
77:11:5f:6c:99:11:67:10:e1:97:f6:b0:0c:80:28:
f5:bd:15:79:d9:22:35:65:8b:ab:6a:9d:a9:b9:19:
5c:f6:38:1a:90:29:1b:d8:55:fe:bf:7f:64:f1:5b:
31:82:e6:d3:b4:6b:c4:0a:f3:dd:5d:32:89:c5:03:
4a:fb:0b:7d:b6:27:60:d9:2e:31:b4:33:d3:ba:fa:
d9:d4:04:b3:55:fa:44:24:3c:fb:37:69:4c:23:1e:
e6:d5:f6:6d:1e:f1:58:58:a1:98:d7:0b:53:ed:9c:
82:ad:b3:58:ac:9f:8f:60:f0:40:40:88:b7:d8:f2:
bd:f5:01:e6:a9:92:96:11:e3:13:1a:6e:0e:b1:b5:
78:c4:0f:75:10:56:2e:c0:02:f9:ab:47:61:16:c9:
e1:e6:c0:01:fa:cb:2a:34:c6:eb:1f:b7:ce:51:77:
13:8d:33:bc:06:02:2b:14:f8:9a:17:ae:64:08:eb:
f0:f7:d6:d4:27:71:40:8e:dd:83:dd:85:72:ff:c7:
06:b4:2f:83:5e:ba:2f:d5:a4:38:ef:8a:ca:25:f6:
a6:b5:d3:f0:c8:ff:ce:2b:a4:4b:22:6c:a6:c5:cf:
db:0e:72:48:63:1a:c3:11:0e:02:4a:ff:60:a9:57:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:F3:35:57:2B:00:A5:D3:A7:E2:38:A8:48:4B:65:A9:0B:6B:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a3e3227-1e0b-3834-b593-32d92485e4a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:bc:9a:0a:62:c8:e8:8a:63:52:74:e8:b9:94:ca:9f:3c:66:
8e:5b:ae:e2:62:67:8b:fc:e6:27:45:83:ed:82:e0:b2:9f:80:
7a:41:c4:e2:7c:10:f0:00:cb:20:c6:ad:7e:ee:aa:cf:9d:6c:
ca:24:82:b6:a4:67:e4:3e:90:43:bc:a9:2e:b2:0f:36:44:c5:
8d:05:2a:ed:79:4b:2d:77:08:a4:a9:ce:da:45:0d:23:bd:e7:
86:26:29:e3:0e:2a:5c:50:0a:f3:b6:e9:cd:f5:46:1f:e2:21:
25:94:2f:09:dd:d7:5c:24:30:27:54:6d:47:76:9e:e7:2f:4e:
0f:55:d8:87:03:d8:39:04:0a:f0:97:9d:1e:c7:99:c3:5d:07:
e8:ff:46:24:78:c3:f7:a7:17:b1:c5:00:d1:3c:ee:d6:48:03:
95:1d:f0:42:aa:f9:39:42:60:79:90:eb:ee:b5:92:57:d7:3b:
dd:2b:d0:a8:14:59:51:27:da:c8:50:4f:4a:05:c4:7c:d4:92:
b2:f5:11:e0:86:d8:ac:0d:f3:ac:4c:63:b5:be:38:89:11:81:
f5:bf:72:07:4a:bc:29:6a:dc:3d:2c:01:e8:25:c6:a7:07:2a:
06:38:e5:34:f3:7e:31:dd:72:d8:f4:bd:16:ba:fa:2a:6b:0a:
1c:0d:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:32 2025 by rpki-client