Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa
File: a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa (raw, json)
Hash identifier: RlL8DwDByEvOUIvUGeMAx+4Rw3b1ToFWrHiMJdfy2e8=
Subject key identifier: A8:06:32:DB:D5:22:90:1E:08:C5:3F:EE:A8:A1:F3:50:4D:CC:7F:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D6D13FB46B3CC2A7A5FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 98.232.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:6d:13:fb:46:b3:cc:2a:7a:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6441ef83-91a9-4656-b8e8-481d78bb0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:e4:de:a3:e0:d5:9c:81:0c:89:04:af:e2:
48:68:92:17:9d:95:4b:da:68:2c:03:b3:ec:44:b9:
a6:c1:c4:93:e1:27:4f:8e:b8:8e:4e:4c:3e:37:01:
90:ef:f8:91:e0:78:a1:ce:4f:7e:3d:5e:06:a0:51:
17:84:78:f4:35:68:4f:9e:19:26:93:c2:6a:ac:9f:
e8:80:88:d0:4b:14:dc:cd:32:c7:ee:3c:7b:aa:ec:
fe:07:b9:6d:2a:3e:67:70:c7:02:63:79:f9:0e:e8:
04:b1:a1:ea:f7:69:1d:7e:e1:af:b9:a6:17:95:4b:
c5:bf:64:cb:75:83:45:27:e5:f8:04:73:97:d5:ac:
d9:b5:18:e4:05:b3:28:4f:a5:5c:ca:9a:24:65:37:
12:a4:30:92:e0:f9:9b:a2:e8:f5:fe:c9:18:67:5a:
19:ea:dd:56:0b:fb:6b:ac:f2:78:87:57:17:d1:49:
21:97:87:69:09:2c:95:0f:60:00:2e:f8:06:36:65:
b4:72:a2:b5:f2:70:88:b9:43:fa:0a:22:1d:e4:89:
59:c0:4f:e0:8c:e7:e8:ad:ae:f6:3f:bc:8b:31:ce:
cc:17:6b:ad:ea:c8:40:78:29:42:99:83:fc:12:1e:
15:48:b3:45:4a:50:09:46:7a:9b:84:70:f8:41:e2:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:32:DB:D5:22:90:1E:08:C5:3F:EE:A8:A1:F3:50:4D:CC:7F:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.232.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:e8:84:9c:83:0e:86:21:1a:76:ed:97:20:b5:d6:0f:17:45:
e6:c4:a4:85:6e:0f:3b:06:28:10:15:fa:b8:56:2a:4d:1c:5b:
e0:2c:9c:f3:ca:90:2c:5f:fa:1e:54:3c:8b:f2:b5:3c:fd:1d:
ea:a3:b3:bd:97:77:bc:e5:ba:5f:a7:05:6e:a2:11:b6:25:ff:
02:d1:52:25:96:38:4c:8b:19:39:2d:c4:d8:68:27:6d:56:3b:
af:2d:12:0a:b6:9a:b7:dd:da:8f:a7:7a:df:81:97:c8:01:7a:
60:6d:4d:90:0f:f5:f6:b0:ec:25:1f:08:f3:35:8a:97:9c:69:
5b:d8:29:e7:f9:b7:37:78:25:56:de:76:19:8d:08:ef:94:41:
49:87:f5:28:8d:cf:f1:24:34:f3:bb:d5:0c:76:6c:e2:5a:8c:
aa:e1:c8:53:ac:fc:29:9c:8e:13:42:f8:b6:10:93:64:d3:81:
75:32:aa:2f:6b:3e:d7:48:92:8d:63:40:2f:23:62:6a:1b:df:
82:ca:07:f0:a8:56:16:30:11:41:bb:0a:3f:f8:56:85:73:6d:
c3:26:09:df:26:83:17:b5:93:0f:e6:6e:18:94:b6:4c:96:78:
28:90:d7:47:fe:b8:b8:46:14:2e:08:6b:5b:3e:ff:01:20:34:
12:5a:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:36:49 2025 by rpki-client