Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/befa0791-4269-3e9e-945c-3907fd00aacd.roa
File: befa0791-4269-3e9e-945c-3907fd00aacd.roa (raw, json)
Hash identifier: /mH/b13iRUiA/6tFzNC9BiGwl427qx+1eX7cB6sjPFI=
Subject key identifier: 77:64:8D:C4:27:4B:A2:44:78:CF:32:E1:E9:61:F0:D2:7C:82:11:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C154A75E284A3DFE1BFC300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/befa0791-4269-3e9e-945c-3907fd00aacd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.45.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:4a:75:e2:84:a3:df:e1:bf:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c1ca88c3-f61b-4e59-ae02-c255e5962f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:6a:f9:7b:c4:17:f9:86:97:c8:d4:87:74:
96:f4:32:8e:68:66:83:f7:10:9f:52:a3:9e:12:3e:
99:98:ef:84:09:30:a9:1d:6f:67:16:f7:07:d5:0a:
d6:90:f8:a5:33:f8:5a:75:44:76:a8:ae:00:a3:0d:
96:65:22:3f:46:15:44:de:62:bf:2d:83:3d:9d:80:
d0:d9:d7:db:bc:3d:db:4f:f6:19:0c:d1:f1:ed:82:
30:7a:db:bf:c6:9f:e2:7e:a7:b5:01:1c:a6:8e:50:
a0:b0:cd:0e:2f:11:09:82:23:fc:9a:63:c8:9d:ea:
e7:f7:95:84:07:1b:6c:51:de:8f:b4:9e:49:88:b0:
e1:a6:74:c1:7d:1a:a9:18:13:65:d1:d9:62:41:7d:
14:fa:47:e6:82:80:e1:f9:86:fa:b6:52:79:9e:8d:
86:23:32:8c:00:41:b8:be:e2:51:6c:b3:bc:37:32:
4b:05:00:8b:7a:fc:3a:66:9c:c4:1d:99:72:ff:14:
6f:20:67:ab:50:3c:e0:6a:16:a8:a0:8a:c0:14:36:
05:b1:fb:c9:5b:4a:6b:f6:48:d3:69:23:08:5a:76:
2f:7d:8f:10:41:4c:52:37:a4:10:ce:5c:09:81:63:
1c:58:ae:a2:b7:20:d1:65:9c:69:c5:18:fe:02:fc:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:64:8D:C4:27:4B:A2:44:78:CF:32:E1:E9:61:F0:D2:7C:82:11:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/befa0791-4269-3e9e-945c-3907fd00aacd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.45.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:8e:20:82:1e:ef:68:4c:dc:80:2f:80:ab:dc:a5:41:2a:00:
7c:15:19:93:dc:98:52:14:0c:7c:e4:9b:56:15:15:5e:df:8e:
c7:4c:de:d9:b5:80:96:e0:7d:70:b9:31:50:03:d7:04:e5:e0:
71:80:ca:c6:2a:bf:39:10:2b:4e:0c:da:56:08:f3:b1:6f:72:
b3:55:5e:05:e0:91:6d:bd:4b:50:d1:d5:af:67:de:33:7b:31:
57:40:ca:cf:c8:35:db:97:a7:a6:2d:90:9d:dc:bc:f2:33:c5:
50:b9:49:06:07:6e:c7:02:d4:bb:27:2a:2c:ed:e7:4e:fe:46:
39:48:74:00:c8:9a:75:df:7c:bd:1d:e6:5c:8a:76:ce:bc:13:
a3:3f:0b:64:50:a5:ef:3f:cf:d5:e3:47:a7:d7:9e:1c:da:69:
49:7b:f1:9d:8c:3a:c5:26:48:42:ab:6a:e9:d8:46:85:c3:07:
d0:92:a4:89:bd:50:51:c9:3d:c5:a2:6c:8f:13:a1:bd:b0:12:
d8:87:b3:f3:dc:24:05:9b:9f:12:de:b9:9a:55:ab:e3:82:f3:
3d:3d:7f:20:b9:79:d8:2b:8c:96:af:ac:4d:63:f5:54:9b:11:
b1:f0:cf:15:84:84:9a:a7:82:b6:f7:55:3f:b3:6b:24:74:3d:
4b:d5:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:58:19 2025 by rpki-client