Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d9968f-6889-32b6-965e-71c8a4cb9787.roa
File: c3d9968f-6889-32b6-965e-71c8a4cb9787.roa (raw, json)
Hash identifier: YG1qsyyUSKAha2P+u+t/BFdSjx1NegVtplR4fUmT6wg=
Subject key identifier: EA:0F:8F:38:01:97:C8:D4:ED:7A:71:27:CE:5B:C1:13:F9:C5:FC:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858481440450D523BF3D995F9BD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d9968f-6889-32b6-965e-71c8a4cb9787.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.194.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:45:0d:52:3b:f3:d9:95:f9:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=182b98b0-da58-4310-bc8a-82d6b71524c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:29:38:43:94:ce:09:b9:37:01:f1:74:11:
40:5e:02:4b:33:10:8f:71:b4:bf:8a:f0:46:08:03:
3f:f1:be:48:9a:d6:6f:39:2d:19:e2:98:04:a0:74:
bb:49:b2:66:49:29:ca:aa:ba:ad:c8:44:66:20:a6:
21:b5:99:f4:0b:08:d7:04:e6:f6:f6:94:f1:1b:93:
b4:8b:62:2f:5d:27:27:d5:ef:6a:6c:7e:03:32:eb:
ae:71:69:81:e3:ca:ba:67:ee:8f:e7:66:51:78:9f:
0b:42:20:f2:2b:a4:02:c8:3e:b1:94:f0:4a:80:1f:
28:3e:2b:f3:e8:96:cd:0c:80:8e:fb:9c:92:bb:5e:
fb:f1:9f:2f:c0:9f:cf:c6:93:ff:af:2c:ce:78:16:
78:3c:c9:0e:65:10:3b:95:fc:24:d3:38:f9:35:4f:
77:48:17:b2:16:25:f9:4b:86:e3:55:63:3d:45:82:
89:0f:5d:4e:94:9a:57:ad:8e:5f:87:95:fe:56:40:
16:ec:47:59:48:e3:df:5b:02:60:ff:cc:05:50:89:
f9:99:3d:f3:ff:a3:57:27:45:33:d3:29:92:61:fd:
22:62:17:c9:da:5c:5e:bd:cd:f9:ae:17:20:40:35:
b3:1e:ec:cc:b1:ce:92:9c:77:bc:de:24:f5:f7:f3:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:8F:38:01:97:C8:D4:ED:7A:71:27:CE:5B:C1:13:F9:C5:FC:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d9968f-6889-32b6-965e-71c8a4cb9787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.194.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:84:9e:fd:86:8e:32:9b:5e:f4:cb:b1:93:99:1c:2b:8e:fb:
70:b1:21:35:32:04:85:ca:76:b3:19:61:1c:8a:9a:bc:d3:a8:
2f:3d:a4:2b:dd:6a:a4:6e:32:44:79:14:89:56:a8:47:94:72:
b0:fe:a0:2d:ba:8f:2b:fa:5c:10:6b:9b:16:ea:9b:e0:1b:45:
3a:47:f5:a3:29:7c:a2:03:db:aa:70:bf:f5:3a:52:5b:ea:43:
75:1c:73:0a:a5:e5:d6:ab:b8:a7:49:d0:51:7e:ed:89:32:d5:
dd:68:25:0e:25:3b:45:9a:3f:63:2e:11:42:a0:c6:38:f7:5f:
b2:dc:a1:54:8a:f8:74:14:57:2a:0e:b3:14:d3:f9:fc:75:04:
8e:de:b7:91:a8:0a:72:61:21:5a:75:8f:7b:82:91:31:bc:9b:
62:dd:b2:ea:85:12:ed:b7:80:c0:b8:ef:7b:2a:4d:ec:0d:bb:
b5:c4:3d:4a:d2:4f:9a:84:c5:44:95:b9:4a:63:9a:c2:b1:ed:
83:5f:c5:f1:88:c8:d0:8d:9e:7a:f6:28:6d:fc:d2:2f:89:fd:
1d:1d:c5:1a:31:d6:e3:b9:f0:d8:f4:50:32:61:0e:6c:65:1d:
34:f6:74:7e:6a:02:0b:3f:66:b5:5d:b4:f8:f3:d9:bc:a4:fb:
02:c0:b8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:45:02 2025 by rpki-client