Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b58e4c2-60cd-35b1-bc92-b2d94b0f5420.roa
File: 9b58e4c2-60cd-35b1-bc92-b2d94b0f5420.roa (raw, json)
Hash identifier: xC7Ktz+kVTpDPPPJY4FII+CAyr0n9+VKxlHVNuy1XJc=
Subject key identifier: 09:1A:10:F0:BA:4B:86:E5:9A:49:21:75:AE:17:66:5B:FF:D2:08:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858481440640D285DDEF57C087880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b58e4c2-60cd-35b1-bc92-b2d94b0f5420.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.198.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:64:0d:28:5d:de:f5:7c:08:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1ccce64e-65e9-4929-ab08-c37319c634fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:ce:b9:e8:52:c7:22:72:26:b2:0d:62:db:
c5:df:fe:30:23:1e:8f:70:be:c7:2e:4d:1d:b7:ee:
22:06:e6:34:bd:f0:dd:10:14:64:84:ab:60:30:1d:
80:09:43:40:55:f7:89:bd:c0:aa:47:20:27:13:75:
ba:6f:91:d3:d4:44:48:c0:69:c8:3c:9a:e9:61:b2:
9c:87:9d:0a:09:c1:8c:76:f7:5f:82:23:81:1c:08:
c0:d1:3c:ec:5e:fb:ed:95:f1:22:25:90:9b:b0:76:
58:bb:12:10:3d:d1:17:1c:75:fd:38:ae:cd:08:3a:
9e:4e:6b:8a:0f:b9:4c:33:12:89:ae:83:e5:20:a6:
a6:95:fd:05:50:55:27:9f:92:c7:14:0e:d5:21:e4:
ba:06:47:84:b8:85:e9:23:25:7a:e9:e2:1c:58:89:
fc:b7:9c:68:07:d5:0d:05:b3:cf:f0:95:93:00:00:
69:1f:40:00:23:53:05:b9:49:c1:2d:b6:b0:b5:e4:
94:f9:9c:1c:95:8b:96:32:52:fc:f6:6f:7b:34:e3:
26:03:17:1f:2a:e0:27:86:f7:a9:70:59:0b:7d:8b:
15:51:5c:99:42:cd:36:74:33:fe:f1:04:91:da:cf:
64:d5:ae:07:15:73:ae:91:29:be:31:77:18:78:fe:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:10:F0:BA:4B:86:E5:9A:49:21:75:AE:17:66:5B:FF:D2:08:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b58e4c2-60cd-35b1-bc92-b2d94b0f5420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.198.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:74:23:34:83:6f:0a:88:ee:82:00:34:7c:74:9a:10:a8:d2:
57:0e:2a:0b:bf:1b:31:12:b0:99:cb:29:ac:2f:23:22:b7:21:
fb:ae:2e:fb:07:8b:cb:aa:f6:d4:33:cd:ce:b8:89:72:10:d5:
76:0d:d1:75:0b:99:4d:14:3f:25:23:0f:78:2b:09:a4:28:8b:
68:c6:ff:f4:59:1e:80:08:83:7a:da:7a:3f:68:b7:9f:f1:71:
07:b1:25:e4:67:e8:b3:40:ca:9f:a4:a6:9c:1d:2a:36:94:dc:
4b:1a:66:7f:ac:87:ab:b5:bb:d0:81:60:42:64:3a:72:d7:d7:
66:c8:65:28:23:f9:27:53:8f:39:e8:08:3c:60:4d:a3:99:c9:
d8:59:7b:04:d6:55:48:3e:b9:17:74:0b:05:11:98:de:b2:03:
82:7f:40:c1:58:a5:d6:1b:f9:b3:ee:cf:81:ec:74:e0:0f:87:
af:7d:3a:af:da:f2:30:9c:db:36:f4:45:61:37:45:a9:7a:97:
0e:b9:cf:da:e8:fd:a6:48:06:77:d9:15:16:f7:5e:27:66:86:
93:f9:be:25:27:1c:e4:d9:0c:c3:2e:13:7d:b2:89:c1:d0:00:
ad:29:78:23:7b:92:df:f3:62:95:e7:4f:a7:35:1d:26:e9:f0:
b7:d3:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:37 2025 by rpki-client