Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc4e65a-8326-32e3-bdd2-8d23fe29f968.roa
File: 9cc4e65a-8326-32e3-bdd2-8d23fe29f968.roa (raw, json)
Hash identifier: 6/afhdssfS7+8PDVnrIviylWzqSmUyrtwx9yMcRkbq8=
Subject key identifier: B6:22:C2:9D:B5:AD:B2:A1:82:67:01:1F:79:88:EE:A1:F5:05:12:96
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11BC8F8D9EF56CA06E0880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc4e65a-8326-32e3-bdd2-8d23fe29f968.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.207.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:bc:8f:8d:9e:f5:6c:a0:6e:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e2c9cb33-1138-495c-8f4b-5541d87584f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:86:f4:07:4c:89:70:a0:63:92:2b:81:0f:
01:70:8e:6a:33:5e:56:ef:e6:69:94:17:50:6a:01:
53:0c:97:8e:1d:a1:01:eb:f5:a6:58:15:3a:c4:2c:
47:8a:43:cf:ce:7c:cd:ae:d0:c3:c3:7a:6e:2c:64:
fb:86:ae:21:e2:e7:fe:53:ae:a8:3a:04:7f:61:47:
82:6f:d8:3c:2d:66:4b:25:ed:28:67:86:d1:f1:9a:
f4:e0:43:a1:d9:b1:42:49:fc:3f:e7:cc:73:88:59:
59:68:af:0b:36:51:98:90:11:7a:86:6f:a0:58:29:
f6:06:85:ad:a5:2c:76:41:bc:21:d1:ba:8a:02:67:
fe:6e:02:d9:f2:7e:39:82:3f:6c:3c:91:78:3a:0a:
e2:e3:31:a3:99:e0:cc:91:1b:36:42:9c:36:c6:19:
e0:60:26:5b:1d:a9:43:88:a5:dd:b7:dc:67:2f:0b:
7a:4e:a7:e1:a1:6a:0c:b4:e4:ed:1d:1b:91:ec:d7:
d9:75:38:64:70:b6:ee:c0:40:f3:50:76:74:c4:5d:
2d:69:0e:c5:1f:5b:5b:cc:01:ce:cf:64:91:9f:18:
a1:3a:47:ce:ad:bc:8c:56:8e:c5:54:d4:17:25:41:
38:f4:13:14:fc:24:eb:b8:3d:1b:7c:76:98:d1:00:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:C2:9D:B5:AD:B2:A1:82:67:01:1F:79:88:EE:A1:F5:05:12:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc4e65a-8326-32e3-bdd2-8d23fe29f968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.207.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:48:b1:30:5a:63:6f:ca:ab:a4:81:62:73:57:f6:36:ee:7a:
45:9f:38:12:be:51:c9:71:44:87:b7:d3:30:05:87:fb:6d:22:
71:93:60:7c:ba:3a:b4:02:9c:a1:b7:5e:2b:70:27:9f:f9:bb:
1c:2b:67:60:f2:9f:cf:b7:ef:38:11:0f:1b:5a:7f:a6:62:19:
1e:ad:aa:66:4f:18:19:a2:1f:4f:39:73:b5:e0:a6:fe:ee:18:
73:1b:40:95:0e:7e:c9:59:ae:65:14:ae:ca:08:3e:de:6a:b5:
1d:12:98:a2:38:0e:71:b9:e6:12:4c:56:f5:ce:30:0e:99:f0:
49:13:8d:dc:f9:79:ea:00:33:bb:35:8d:32:63:ff:4e:71:f4:
a2:54:e5:09:03:b3:7f:66:ae:7b:d6:a3:78:fa:15:5a:82:c4:
84:6d:85:2d:53:11:14:31:1c:cb:62:3c:63:47:37:47:bd:fb:
f2:05:c0:02:b4:fa:b2:be:65:19:f5:3f:3d:ad:85:ba:0d:b9:
2e:4c:76:a8:e2:04:d7:24:3c:a3:fe:b2:08:ef:3a:20:cd:48:
52:66:2e:d0:91:67:66:08:bc:21:8f:9b:8c:62:c3:33:ec:78:
42:49:41:e3:7c:d7:cb:bf:ed:b3:c1:be:14:0c:ce:09:f6:cf:
99:be:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:09 2025 by rpki-client