Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c217353d-a09b-3ac0-a38f-deafb67a7ff5.roa
File: c217353d-a09b-3ac0-a38f-deafb67a7ff5.roa (raw, json)
Hash identifier: eqbf8YYjMKAY2o3DYNf6rqi2hSvLKxvYfX21j1nOeHM=
Subject key identifier: 5F:44:BB:F0:FD:13:36:F8:FA:D4:08:43:24:DB:A8:60:DB:05:D2:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C115EBFE6B26B14B6233C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c217353d-a09b-3ac0-a38f-deafb67a7ff5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.226.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:5e:bf:e6:b2:6b:14:b6:23:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b6bbd5ed-128c-4b60-8489-dab771e918f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:d6:87:e9:2b:bb:10:01:8b:3e:a9:f2:b2:
4d:4d:cf:34:5d:46:b5:4f:f6:ff:d5:5e:26:96:10:
f1:47:51:73:c0:2f:4e:e9:5c:cb:4c:11:de:09:ff:
20:ca:f7:46:c7:90:a9:e5:1f:a8:83:76:b0:5c:c9:
3f:63:e0:8f:b7:f8:cc:be:b8:f2:da:34:b5:fd:81:
6b:4f:b0:de:31:04:56:25:bd:29:96:41:1d:f4:60:
57:a3:65:65:15:75:48:9a:5d:d2:e5:77:89:c6:1c:
95:2d:78:4e:0d:4c:f3:4f:f7:88:64:0d:0d:f7:a0:
d8:71:e2:06:3b:e0:99:61:cd:89:f1:d5:c5:77:51:
6a:09:6a:c2:d6:fd:ab:cc:b6:b9:e0:67:ef:ce:f3:
77:86:a5:fa:93:5a:a6:9b:87:e6:74:78:48:96:56:
a3:62:41:8e:ec:d4:b4:73:5f:86:ce:fc:5f:9d:3e:
00:3c:f8:ef:3c:d1:cd:2e:eb:03:cd:b7:93:6c:60:
3e:cb:85:a3:18:4b:82:46:25:4c:c5:4e:27:64:a6:
85:77:0e:86:18:ea:35:77:47:c0:7d:f2:cc:8e:90:
0e:5f:65:4f:f7:05:bf:65:46:74:9b:35:61:1c:99:
ed:18:8f:7c:25:e7:52:61:4b:86:84:37:64:f8:1b:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:BB:F0:FD:13:36:F8:FA:D4:08:43:24:DB:A8:60:DB:05:D2:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c217353d-a09b-3ac0-a38f-deafb67a7ff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.226.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:52:72:8e:7f:ed:37:7a:44:e5:08:0d:fa:2b:2c:b4:b6:47:
e1:95:39:ad:3d:d9:64:bc:fe:bd:d0:01:98:59:e9:cf:9e:2a:
40:c5:8d:97:9a:b9:f5:f1:21:07:59:b2:01:29:20:6b:15:e2:
15:fd:00:ee:14:eb:44:0f:31:fe:a7:d0:62:82:ee:d1:89:96:
b5:3c:b3:d8:2b:f6:b6:c6:46:96:c4:3a:78:ed:06:d4:9f:c2:
72:51:c6:b5:a2:37:65:5f:2b:52:1d:05:50:76:d0:0d:84:62:
2a:ff:18:bc:db:29:41:65:ce:5c:7a:3c:08:cc:9d:b6:18:54:
3e:48:d9:e8:3d:b6:7d:b0:ee:4d:64:59:37:22:7f:1e:fc:a3:
25:c0:b7:0a:3b:75:6f:ad:c9:dd:32:58:7c:cd:4a:35:76:b2:
63:0c:0e:2b:ec:5f:1f:cc:69:7a:8b:86:79:eb:e6:b4:fb:92:
6a:98:24:00:5f:e7:0d:31:d9:9b:ca:d5:1b:01:3e:aa:5a:d4:
f0:85:c9:bf:91:af:a8:ca:db:8f:7e:9e:5c:0a:ee:12:ed:c3:
51:de:9f:d0:57:44:60:a9:35:73:56:24:06:ef:e1:2c:6b:94:
5e:ce:12:6c:1a:8b:56:6c:85:b0:ee:d2:cf:73:27:08:c2:74:
79:bf:f7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:03 2025 by rpki-client