Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa
File: c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa (raw, json)
Hash identifier: Y1XMBIvmMdQnmD0fGsupPm3vkKlpz6AqCzMf6DM5hqM=
Subject key identifier: D9:3A:3C:50:2E:A8:75:EC:F5:A8:02:D5:AA:58:77:01:D2:FE:A0:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D739CEB08EC468735A380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 98.246.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:73:9c:eb:08:ec:46:87:35:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c3968a4c-3bb5-4991-bcb9-33c9624df226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:a4:91:36:fe:ba:e1:3f:21:f3:d2:43:4f:
6b:ad:ce:bd:62:6b:98:b7:50:a5:59:0b:9a:ec:76:
61:e8:9e:d1:29:68:45:3d:70:40:ba:0f:14:9f:20:
ee:45:8c:7c:d4:3e:31:23:96:f8:71:d3:5c:f1:36:
c9:d1:e1:c3:53:9c:6c:ba:9f:5a:62:91:5d:51:ab:
da:8b:db:7d:4a:e2:39:ad:6b:51:e3:4b:12:d8:67:
e1:eb:09:33:ae:68:85:76:43:13:dd:5e:20:d0:56:
89:fb:e7:88:ea:cf:65:57:3d:35:45:7b:f3:90:3b:
99:8b:0e:1c:2d:13:cc:4f:86:13:2e:21:37:f3:a7:
2e:6b:92:6d:9e:12:78:ba:8f:6a:49:77:6c:a9:50:
8b:6b:2c:dd:73:cb:36:86:49:4c:24:9a:fc:df:f7:
d8:be:56:e2:77:e3:01:6f:c0:9f:00:47:5e:98:26:
69:32:b5:1a:7c:94:a1:89:94:96:d1:a7:81:e7:37:
08:a7:a0:fd:c0:a8:28:a3:aa:8a:0e:ae:50:6c:23:
04:92:d2:c9:09:37:b8:a5:3a:a0:ba:de:ca:c8:dd:
b1:48:b8:33:0a:e1:d9:2a:80:0b:18:34:52:52:56:
e2:57:99:fb:5f:be:ab:28:7a:bf:ef:55:79:ba:6b:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:3C:50:2E:A8:75:EC:F5:A8:02:D5:AA:58:77:01:D2:FE:A0:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.246.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:11:da:37:8e:cb:01:39:22:7f:e1:58:81:0c:ee:df:fb:37:
6c:b8:0e:48:b4:61:44:be:a3:dc:97:24:53:f7:63:4f:ac:c7:
1c:30:0a:78:55:1e:ec:fb:e8:b7:d4:b7:d5:f4:f7:62:13:d0:
5f:e0:ad:01:36:09:15:b8:1c:38:0f:ea:b3:ae:82:d9:32:12:
e1:d0:e3:a6:40:34:74:0d:85:2c:18:58:63:55:50:84:43:c7:
a3:43:6a:ca:12:54:1a:b5:58:43:37:e3:ac:50:d5:72:a2:5a:
d7:d9:6d:e6:6c:7e:d6:f2:b1:c0:fe:52:cc:2c:4d:0f:63:ba:
34:3b:17:c8:e3:68:78:ca:b5:60:93:cd:39:c4:45:66:71:f2:
9d:98:3c:d1:2a:31:5b:95:39:d7:09:8b:dd:3b:58:7f:e6:2c:
f7:1f:a4:d0:38:a2:e5:6d:37:32:92:43:fa:6f:d8:99:b9:2b:
bc:ac:01:06:a7:c3:3a:41:8d:1b:8b:69:76:00:1d:36:9a:54:
1e:97:25:6f:32:cb:5c:eb:24:2d:56:46:16:f3:48:3b:5a:17:
c7:16:8f:a6:97:55:7d:2c:66:3d:e4:94:29:45:c0:81:71:4f:
47:d2:99:4e:92:fa:4c:35:41:49:0f:07:7a:0c:59:77:50:9d:
59:4c:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:02:22 2025 by rpki-client