Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c166fcc3-d6c7-3e4c-b5e2-a053ce0fcb75.roa
File: c166fcc3-d6c7-3e4c-b5e2-a053ce0fcb75.roa (raw, json)
Hash identifier: NRRhzyMvZvp3zWpgsNJ4K47hX/OcxlZS6i9SDu7POSo=
Subject key identifier: 76:88:8E:5D:53:91:1E:C8:FB:08:7C:73:0C:91:5B:F6:E2:A7:84:C1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858481440792AFE29F646EF3A9B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c166fcc3-d6c7-3e4c-b5e2-a053ce0fcb75.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.201.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:79:2a:fe:29:f6:46:ef:3a:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4c2d7946-f6ef-4795-902b-bec8010fe419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:aa:f5:00:43:41:9b:21:ca:32:81:3d:16:
d4:ec:74:71:95:13:7d:0a:cc:41:25:ec:79:4b:b4:
eb:82:0c:57:d0:49:90:b7:95:82:62:91:0f:f7:d8:
d9:bc:f4:0d:da:72:b8:94:22:21:83:b2:dc:41:df:
33:41:f0:d4:84:a0:87:35:58:16:76:f5:8b:05:95:
96:ab:da:23:e0:f8:01:06:58:e8:59:49:ca:9e:5d:
14:54:04:ed:6b:2b:d9:94:11:f5:dc:4d:dc:8b:6a:
e6:57:15:d9:27:84:f9:76:b0:20:cb:b5:86:63:07:
51:78:22:04:49:f3:e4:d5:6e:12:4e:f7:d7:1f:a3:
e9:e5:65:63:14:26:2c:8d:95:bf:f5:dd:20:a7:98:
3b:15:a7:f3:20:38:d2:54:5c:9b:6f:cf:78:c9:6d:
78:ba:97:aa:01:c1:96:64:9e:75:cf:73:0d:dc:6f:
df:12:8a:5a:1c:7a:2b:2d:5b:c8:e1:14:9f:8b:9d:
31:96:f7:c9:eb:bd:91:7a:f9:05:67:40:36:9a:8e:
1e:15:8d:ca:3a:f9:d6:7c:90:52:0f:a9:d3:cf:58:
21:2e:85:ae:54:83:bc:8b:1e:3b:75:fb:db:24:ba:
46:c4:d3:4b:30:78:df:05:ee:43:2b:c1:16:4e:32:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:88:8E:5D:53:91:1E:C8:FB:08:7C:73:0C:91:5B:F6:E2:A7:84:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c166fcc3-d6c7-3e4c-b5e2-a053ce0fcb75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.201.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:43:54:91:2e:ad:e7:9c:98:2e:42:21:9a:c8:c9:21:0c:6c:
22:e2:2a:a8:fe:ed:d4:40:2a:d6:99:dd:54:63:84:b7:6f:9d:
ca:86:ba:8f:c3:ca:53:35:55:49:9f:20:08:31:47:60:70:de:
45:24:ad:50:70:07:59:29:7d:df:d5:bb:7c:99:ee:77:77:c8:
fc:60:6e:12:1f:9e:69:00:03:cd:a1:10:1c:48:3e:71:e6:61:
68:62:e6:54:d6:74:67:32:6c:ee:19:bb:c2:92:8c:f6:4e:2b:
59:1a:c2:31:96:f9:0c:93:50:83:68:55:78:be:7c:11:c9:59:
b1:0e:fe:48:1f:b6:b1:b4:82:6f:81:06:d4:78:2e:4d:d1:27:
c7:c8:ae:64:2b:71:0a:01:88:71:ae:45:f4:33:d5:b4:cb:62:
12:cc:b3:82:46:24:8d:b3:07:3d:5a:84:41:08:1a:f2:02:ce:
6f:44:83:83:aa:28:cb:20:59:80:a7:c4:68:5e:10:b7:24:94:
58:a3:22:65:2b:54:1e:c3:82:00:86:dc:9d:a5:91:1d:28:61:
be:86:44:98:7e:c5:ad:ee:0e:bd:f0:79:c9:e8:dd:3f:3a:c2:
a3:b5:91:21:e8:03:9a:d7:56:7e:47:07:01:92:07:b1:67:82:
2b:94:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:46 2025 by rpki-client