Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc86a45a-538b-3c3e-b047-f91faa28f2df.roa
File: cc86a45a-538b-3c3e-b047-f91faa28f2df.roa (raw, json)
Hash identifier: dT/MCh+SIvFIYIhpv41yyu+sRKCdkO8EMts4HnN2Oig=
Subject key identifier: DA:BC:B6:EF:94:20:F5:F9:CC:2C:A6:7A:8D:AE:92:C5:C6:60:5D:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144073BD95A2D792F71C2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc86a45a-538b-3c3e-b047-f91faa28f2df.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:73:bd:95:a2:d7:92:f7:1c:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7c170325-fdaf-44fd-ab30-760b6327308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:78:53:a4:ef:e5:38:39:31:f0:c1:7a:34:
de:02:ac:cc:64:12:87:ae:12:27:8e:b1:e8:6c:35:
db:bd:8b:42:20:90:de:36:20:1a:ba:d2:1b:72:aa:
9a:68:be:f5:ed:82:f3:53:b0:54:78:88:ac:51:96:
86:13:47:23:c5:39:d5:b1:54:0d:b5:13:22:34:ff:
50:8c:2d:03:c2:9b:23:4c:08:c4:04:96:53:4d:09:
47:55:87:05:09:00:be:5e:ae:1b:d2:ed:84:1b:a3:
77:7c:63:a6:f1:ac:e8:a0:9c:c1:5c:e8:00:ec:00:
94:db:cb:fc:51:ac:42:40:a0:16:b1:b7:e3:c4:28:
f7:86:48:50:76:77:74:d7:74:22:2d:25:1c:19:19:
03:69:aa:36:1a:5c:f6:62:36:97:01:0b:d0:22:a1:
ac:a3:f0:48:db:e2:2d:7e:23:24:b9:b5:b8:da:79:
6a:89:d1:9d:78:01:cb:76:29:66:9d:0a:e4:d6:83:
8e:4a:d8:85:1a:d7:30:fb:84:2e:36:d7:4b:d1:f7:
e8:ff:40:d6:2d:99:c4:0c:14:0e:7e:e6:dc:89:03:
72:72:e1:6a:ac:3a:dc:87:dd:04:c0:dc:50:70:d9:
a5:9b:ac:89:e1:24:7b:a9:76:5a:f6:a2:f6:2d:8a:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:B6:EF:94:20:F5:F9:CC:2C:A6:7A:8D:AE:92:C5:C6:60:5D:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc86a45a-538b-3c3e-b047-f91faa28f2df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:21:3d:8b:03:52:d5:72:e8:94:75:41:1d:2c:05:7b:91:64:
53:cb:53:dd:46:df:ef:49:6c:d0:a6:99:db:30:ed:6e:76:1a:
e9:50:b9:b5:13:ae:4a:2a:d9:75:f0:2f:a0:5d:66:69:19:53:
c8:f2:6e:ea:2c:36:d2:0b:69:23:81:27:8b:01:fa:18:30:55:
ea:cb:c0:fb:23:5b:42:ce:c2:f7:98:4c:34:18:90:6d:12:f5:
65:ec:2c:16:a5:db:ca:3a:75:52:33:cb:9f:82:86:6d:03:6c:
d7:b2:ed:f5:d2:32:4c:0e:58:fe:7b:19:db:06:1d:3b:db:5d:
fa:39:f1:fe:dc:7a:cb:d8:01:2a:41:b7:a7:81:d3:a9:77:a3:
70:82:6d:e6:21:d4:ff:db:29:aa:4b:58:97:27:0c:3f:3c:ca:
41:37:ee:b6:ec:d3:ba:3d:d3:39:7d:4c:da:99:49:e8:95:2b:
3d:a7:78:dc:12:61:4c:c0:97:50:31:9a:5e:13:86:41:15:1c:
00:75:fc:b7:ce:8a:ef:1b:d1:f3:0c:ea:48:7f:b1:01:2e:d6:
14:4f:2b:65:5f:9f:9d:d8:c1:3c:73:01:ed:f2:c1:a0:66:c7:
a9:f4:06:c5:fd:a8:af:e7:7e:b9:84:70:73:ae:47:64:82:3d:
8b:a9:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:36 2025 by rpki-client