Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa
File: cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa (raw, json)
Hash identifier: Gn31vdTQemEx13Qu4OGxsvCj6L0PCen6ZHtFmjeqL80=
Subject key identifier: 60:6B:80:CF:E9:28:00:CB:05:89:65:4A:9B:50:75:F4:49:A7:D1:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10B3170E23BB1162E68380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 76.98.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:b3:17:0e:23:bb:11:62:e6:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3626edd6-9579-4cc3-b2a6-b952965769c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:dd:a7:1f:57:ef:74:73:59:b7:3b:34:af:
de:7c:b0:09:b2:df:5f:80:03:e2:5e:f7:3d:76:13:
b0:87:70:1a:ce:4b:d0:e4:7c:d3:2f:dd:de:1f:ba:
08:4a:cb:98:0b:1a:e4:63:34:ac:fb:91:19:db:37:
83:82:89:d0:f5:06:e2:c5:61:39:ef:4a:c4:f1:53:
8b:38:22:8e:60:15:2e:50:fc:13:f0:44:19:97:b1:
86:da:ef:74:70:3e:5b:d9:f0:d1:74:95:78:e5:c6:
eb:06:fc:c7:f1:0d:c0:39:e3:90:80:8a:71:1c:dc:
49:cf:b5:ad:2e:98:9a:06:d5:54:f3:98:e6:e4:df:
5f:fb:ee:35:72:e0:e5:a2:81:dd:10:16:5a:78:86:
0d:03:bb:42:41:e2:1b:fc:91:c3:ad:e4:8e:0f:b6:
37:a2:e4:0d:2a:c6:71:9a:bd:d5:75:14:94:12:a5:
fa:92:f1:7f:32:1b:4a:5c:0e:b2:90:06:41:ff:8b:
f8:ed:64:01:2d:a4:ae:d5:d2:2b:d3:90:dd:d1:46:
f0:ba:f1:f6:2d:82:91:f2:d5:09:f3:b6:48:89:16:
b8:ae:16:66:c4:3e:ab:c3:26:96:a1:f3:c2:33:a0:
f1:c3:ed:48:9a:c2:d2:2e:f9:cd:b3:3f:9d:00:fc:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:80:CF:E9:28:00:CB:05:89:65:4A:9B:50:75:F4:49:A7:D1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.98.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:59:8a:1f:4e:25:ac:9f:6c:8b:90:cb:9c:8c:28:05:bc:df:
3b:eb:c1:19:da:c4:df:6f:67:7c:99:a5:c1:91:7d:29:b7:44:
1d:53:75:fa:1b:ac:35:12:e4:56:fa:2d:d4:65:24:5d:04:69:
2f:60:b4:a2:46:d2:8e:67:f1:2d:b7:79:75:fd:f8:b2:f0:a5:
71:65:ba:c6:34:d5:1b:59:1e:e6:04:94:ac:71:15:98:96:e6:
45:f0:3d:a5:50:9f:bb:08:9c:e0:46:e9:72:20:ed:97:9a:2a:
2b:6f:94:18:29:bc:17:03:b2:56:6f:6c:c3:d1:37:ed:63:eb:
dd:06:55:a9:bd:d8:73:c4:18:04:28:e2:66:24:0a:31:f1:38:
7f:be:2a:05:67:15:06:0e:49:0c:f1:2f:c0:a6:2f:28:73:d8:
9b:7b:71:fc:d4:da:c1:fc:2b:e2:8f:37:b2:50:2e:98:67:1d:
c4:3e:50:f9:7b:f5:dc:6f:78:c0:2b:20:45:7b:9d:57:0b:eb:
79:9e:f2:76:4e:5d:db:08:ee:d1:f3:1f:b1:5c:00:f9:30:c6:
f5:46:ae:64:22:82:07:27:2f:d7:a2:29:2a:12:14:a2:5a:bb:
13:73:fa:4d:1e:84:1e:4f:a6:b4:89:7c:bf:a7:a6:fb:96:0a:
a6:33:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:02:48 2025 by rpki-client