Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa
File: bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa (raw, json)
Hash identifier: 9ga02WZdGtWJnyiiOPXVeVL6RpG5Qri4aK+zu6hQITs=
Subject key identifier: A4:C8:CD:26:10:58:B0:EE:0E:F6:01:AE:03:EF:9C:D7:08:50:0A:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12FFA1BB56183B74E87840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.212.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ff:a1:bb:56:18:3b:74:e8:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2b0f5095-22a8-4a8e-b429-a8716e1e541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:b1:d9:40:b3:f6:8d:20:fd:a9:a4:cc:0c:
60:a1:6c:35:29:3d:c3:54:67:98:cf:ed:dd:3d:8b:
80:94:a0:3f:7d:64:41:88:10:43:72:a4:0d:19:33:
0f:11:09:7b:d2:66:0b:88:c9:87:40:17:c4:b3:2b:
81:b9:b6:bf:80:e7:4e:73:53:da:d6:3f:b7:2d:65:
9d:34:77:dc:d1:21:a8:c4:c0:31:c2:73:20:16:af:
ea:ce:82:50:f5:2b:0b:85:26:ce:b8:bd:32:94:6c:
41:38:4f:95:c2:57:1d:97:17:32:9f:ab:1e:30:e5:
b7:57:0b:b9:06:b7:f6:f1:05:78:a9:08:bd:c0:29:
28:be:4d:1f:9d:55:74:59:ce:4a:42:7d:bb:67:44:
22:a5:15:4d:d0:79:32:98:83:1c:f8:ed:41:3b:c7:
7c:d8:76:7e:cf:86:57:ef:c0:96:cb:38:75:1c:50:
b4:cc:79:f7:a3:16:e4:fd:85:47:4a:f7:62:f8:fb:
60:e4:96:49:38:2a:9c:b9:31:d2:71:28:53:42:74:
53:e2:2f:02:99:19:49:13:07:51:eb:6c:13:28:56:
dc:6e:99:7d:e2:a1:29:fa:cc:3c:79:28:ec:0e:ba:
16:68:92:44:48:86:d2:f1:8d:71:9a:cf:c7:0a:d4:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:CD:26:10:58:B0:EE:0E:F6:01:AE:03:EF:9C:D7:08:50:0A:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:74:a7:4e:ed:8c:bd:ad:ec:25:cd:73:1f:bc:2d:89:da:06:
b7:f7:bc:a1:a4:94:69:29:0e:37:44:91:6a:ae:36:11:12:02:
3c:a9:f7:da:52:62:9b:10:5c:7b:98:f9:c1:c4:e7:35:31:f4:
58:9d:49:24:ec:d1:41:63:cc:9a:58:0c:b3:0c:a9:1c:42:8a:
b6:e3:10:6b:06:be:d3:5f:7d:19:f4:15:0e:fb:9d:d1:1a:56:
ec:de:42:54:8e:e9:3b:14:a1:6a:d3:39:88:aa:bd:0b:de:0c:
7b:3e:9e:61:57:bc:18:d7:2c:e9:75:e1:fa:73:23:ce:1b:a2:
53:de:1f:9f:c0:c8:d6:03:24:dc:f5:31:d9:19:37:48:4e:7c:
a5:70:4e:68:dd:11:ea:e7:cc:92:01:d9:b6:37:e6:1d:95:7d:
c4:93:6b:2b:78:48:bd:bc:01:76:43:78:22:ea:06:5e:a8:41:
f4:46:7a:c1:02:b4:73:c9:a9:82:41:44:32:7b:8e:71:2d:23:
78:96:6c:ec:15:98:1a:6f:a9:28:9b:70:42:83:79:36:7b:db:
e2:71:78:0b:d4:2f:42:02:94:15:e8:56:c8:0f:4b:65:0c:d7:
2b:71:76:00:8b:aa:a2:f6:fe:d5:db:ce:b8:4b:82:d0:67:8d:
9e:be:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:12 2025 by rpki-client