Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c952b391-a453-34a3-8d27-27472f4485a5.roa
File: c952b391-a453-34a3-8d27-27472f4485a5.roa (raw, json)
Hash identifier: EH/Kg27Vr9lv2I3txBRW3y6QQX2ZR+EmcN02PD8HjKQ=
Subject key identifier: 86:E7:27:9C:B2:6B:61:34:3F:CD:5B:23:44:10:83:E4:B8:A7:BF:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130CBB26F472970EFD6560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c952b391-a453-34a3-8d27-27472f4485a5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.46.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:0c:bb:26:f4:72:97:0e:fd:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=87d5a315-0002-4bd8-b22d-c83bd6260361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:f6:45:06:db:d9:01:f0:82:fb:a3:82:0c:
2d:c0:cd:33:cf:9b:77:87:c9:71:92:2d:87:f6:f5:
6a:54:43:bd:4a:a4:d9:35:c4:21:8f:ce:fb:3a:03:
00:7a:7e:7d:0b:bd:73:d4:3e:9b:99:89:1a:d6:3f:
e5:fc:05:f3:10:56:54:56:cc:2c:e3:e0:5d:dc:8f:
b3:ae:78:4f:52:42:2a:de:5c:25:16:68:6b:df:a5:
22:b5:43:29:12:f3:f3:57:12:2c:89:1d:3f:f3:c8:
82:cc:a4:9a:96:b6:4d:08:44:c6:67:ba:17:e4:41:
6d:03:50:b8:a5:8a:85:53:1e:c3:f0:77:56:47:fa:
3b:fc:2b:cc:0f:ad:34:4e:74:91:e9:21:6e:14:a8:
14:36:4a:2c:b2:61:a4:63:39:ff:a5:fa:8f:60:a0:
d6:36:9b:f0:26:98:7e:9d:6e:76:cb:23:f2:69:f3:
5f:34:75:f3:65:2e:ac:ab:5c:f2:17:39:33:a8:64:
1b:c0:30:5a:74:6a:d2:64:7c:6e:67:17:41:ee:ef:
96:f1:b4:52:16:28:41:0f:aa:37:11:e6:0d:62:b0:
fb:36:6f:42:4b:05:8a:7f:f0:f9:7a:43:de:e2:fd:
ba:b3:45:7a:7b:25:8b:06:58:79:56:64:09:20:09:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:27:9C:B2:6B:61:34:3F:CD:5B:23:44:10:83:E4:B8:A7:BF:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c952b391-a453-34a3-8d27-27472f4485a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.46.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:d1:85:68:59:96:da:35:cc:32:fe:59:cf:0f:ce:57:ed:fc:
87:ff:de:9f:5b:63:95:83:5b:30:16:6f:d1:2e:9d:04:be:48:
8e:c8:89:db:5b:81:ea:5d:10:bc:04:bc:f2:c8:01:91:b0:a0:
0b:e2:52:19:34:6b:e8:a3:72:f7:3c:8e:ce:18:9c:12:da:ba:
cd:be:6f:72:13:46:54:8e:f6:cc:72:c9:c5:e7:a0:8f:22:04:
10:c3:79:f1:12:9a:10:68:e4:66:97:f4:48:ab:3d:40:72:64:
67:b2:7d:49:6e:e9:fd:14:31:cd:a0:99:e6:3d:53:db:4a:eb:
53:ad:b6:1b:82:85:4e:41:ef:07:34:63:d5:96:84:f0:5b:36:
5f:0a:d4:c4:ee:54:c7:d9:0d:d8:72:a5:80:d0:c4:42:7d:fc:
28:ec:87:b9:24:4e:04:af:fc:85:1c:d8:66:3e:0e:8a:53:99:
49:b0:aa:20:24:e9:5d:7c:54:0b:2b:b6:98:62:34:32:4f:4a:
eb:05:08:10:f7:37:f0:27:46:72:3f:ff:b9:62:6b:36:58:6a:
8b:10:0e:d9:16:c3:41:d9:c7:9d:64:28:99:61:8a:c5:6a:ae:
4d:06:f6:ec:a4:86:26:90:d9:8c:29:a7:65:12:e2:f2:bd:a8:
e7:29:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:30 2025 by rpki-client