Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af3512d5-7e3b-3652-86d9-3b2a197b1940.roa
File: af3512d5-7e3b-3652-86d9-3b2a197b1940.roa (raw, json)
Hash identifier: BjZy0NT3wYxMhbMmvOZ03ayNlgORw63qvo2c8nBMMRI=
Subject key identifier: 6A:CB:5F:60:13:16:09:FA:37:80:7D:7D:85:33:F8:AC:86:FB:1C:D6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C15051AFA1FA1B7A211FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af3512d5-7e3b-3652-86d9-3b2a197b1940.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.234.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:05:1a:fa:1f:a1:b7:a2:11:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5f58af07-666a-4728-970f-ec0246ab944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:3a:c2:62:51:c5:c0:3a:69:8d:f3:a5:0b:
14:76:1a:59:44:33:84:0c:f5:bc:50:fa:4c:01:31:
35:5f:2c:99:a7:0e:19:27:8a:47:5d:dd:1e:dd:10:
ed:e7:54:9a:27:ac:fd:52:f8:65:70:8d:11:e9:7c:
f2:7d:19:be:b9:00:eb:34:31:de:70:16:e2:2c:d9:
3a:b7:43:e2:bb:cc:58:86:22:61:ec:eb:d9:72:25:
ac:d8:2d:ff:19:0b:f0:e0:02:e8:bb:24:53:48:6b:
34:fc:29:88:d3:c4:2b:c1:2f:28:bc:ac:bc:48:68:
19:ac:d2:cb:8b:ae:4d:ae:bc:97:2c:23:0e:c6:d4:
39:06:67:2e:c3:0e:ba:9d:ac:d8:14:a6:30:22:a7:
2b:8d:6a:67:e0:0f:0a:e1:dc:92:ff:0a:e6:8b:a1:
91:01:4c:ac:e9:34:83:ce:bd:12:22:0b:b9:50:78:
8e:1a:7f:21:7b:d1:01:e6:07:d7:4f:e8:14:d7:6a:
c8:4b:eb:a5:12:af:53:67:96:70:02:c7:3e:5c:8f:
bb:9d:bd:03:c8:d2:84:7c:69:32:5e:d2:75:f0:11:
d7:c9:97:55:bc:60:10:f9:61:af:8c:86:f6:20:68:
5c:f0:0a:24:93:a5:8c:6e:cf:cb:f0:d4:30:be:da:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CB:5F:60:13:16:09:FA:37:80:7D:7D:85:33:F8:AC:86:FB:1C:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af3512d5-7e3b-3652-86d9-3b2a197b1940.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.234.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:76:c9:a8:30:78:24:f2:4e:9d:81:5a:42:4e:99:f2:76:a7:
ef:9f:54:b8:9c:53:bd:ee:ec:c8:18:6f:e9:0c:9c:6a:d9:ed:
fb:ed:c3:7f:2c:58:ef:b6:b7:5f:4d:4d:f7:ba:88:28:29:f1:
5a:d9:bd:06:45:b2:f6:a8:b8:ae:b9:d1:05:b2:b9:3b:35:fe:
38:69:86:60:ca:31:c9:75:33:19:3e:3c:be:8f:cf:22:04:45:
cb:54:b2:69:dd:05:04:ee:3d:a6:c7:cc:98:4b:dd:de:54:1e:
17:e7:ef:bd:1b:89:09:53:f0:65:f9:fd:ad:8d:5b:91:1e:8f:
b0:f7:45:95:e1:4d:fb:86:0e:d3:d3:bf:e2:09:be:71:e6:09:
76:5e:dc:9d:ae:65:ae:b9:28:4f:3d:20:c6:49:b5:bf:1d:fe:
bd:35:18:b3:39:8c:7f:6e:d5:49:bc:d0:81:53:47:b9:b4:06:
8e:68:19:e9:a9:5c:5b:3e:97:d9:74:e8:c9:e0:00:d8:67:a3:
ed:37:b3:d7:8b:87:01:e2:5f:11:05:b1:a3:06:3f:d9:0e:c4:
53:c8:f7:5e:34:44:cf:ae:89:56:9e:36:d2:0a:ba:f4:b5:76:
5a:43:15:ec:d8:4a:40:46:3e:1a:1e:87:6c:e7:07:6a:22:56:
8e:6e:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:10 2025 by rpki-client