Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
File: d077159d-e0c4-3045-acf7-be507b1c2a2e.roa (raw, json)
Hash identifier: QiQh0y5yVdrNgopE/bZUbdITsprYH0BthOCbg9qD2SE=
Subject key identifier: 52:FC:9C:EC:18:37:9D:C4:D2:A2:66:DB:93:AA:CD:5C:C0:A5:E1:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11C974EE48E0EC3BE10880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.47.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:c9:74:ee:48:e0:ec:3b:e1:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0c22beaf-ce5c-4948-9569-8193e748a537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3e:ce:f3:3f:c9:90:b3:cb:d5:74:7a:5c:98:
93:76:33:30:cc:a6:d5:c0:f0:6f:b2:ec:b6:93:46:
53:d0:20:e8:1c:04:62:f4:0b:94:47:0f:56:f3:9c:
13:a3:1c:44:01:be:eb:da:be:d1:fe:00:ee:13:1d:
ff:76:da:fe:15:6d:65:23:e2:ab:f4:8f:1c:4e:32:
c7:e3:b1:4e:24:45:5b:77:20:92:a7:2e:27:e3:45:
bd:02:ff:37:99:82:27:a5:ca:70:92:95:61:ef:ab:
ff:02:b5:52:71:ea:95:08:9f:51:0b:83:92:70:96:
61:e7:2d:d5:b9:4e:1d:74:5c:98:b3:2b:00:6f:80:
90:66:b3:cf:34:34:99:54:10:c7:fe:d4:e6:b1:0c:
67:5a:2c:ff:bf:ee:92:26:d0:44:02:1c:f1:77:e7:
6d:8e:f7:c8:e8:5f:98:ae:f9:b8:d4:32:f7:ef:b3:
49:e6:c6:4b:d0:75:6b:92:b5:14:78:89:5c:c5:ad:
64:7a:8f:e6:f1:5c:9e:14:de:a2:28:67:51:14:9b:
32:71:f4:a9:50:21:00:14:9f:05:53:b4:0e:78:66:
a4:59:9b:ad:d1:b5:8f:01:4b:1d:93:f5:bc:ac:95:
3a:75:19:ba:f1:7b:50:fb:86:9a:b0:d9:03:93:ba:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:9C:EC:18:37:9D:C4:D2:A2:66:DB:93:AA:CD:5C:C0:A5:E1:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:05:ac:63:40:1d:5e:a2:61:2c:20:e0:74:8f:a6:08:b2:a6:
b0:5c:0c:76:ce:10:5b:b5:ba:f1:d8:ab:a9:2d:6f:df:4f:87:
46:f1:38:f1:22:91:19:9e:27:e5:b1:71:64:2c:21:00:28:d3:
23:9e:f5:2d:22:d8:5c:52:ae:d0:29:b5:8b:88:ea:07:25:fe:
a7:66:21:52:07:72:02:4a:4a:41:41:05:88:48:81:ad:cb:26:
e9:a6:e3:43:c7:5b:5a:c3:00:a7:4e:33:b0:d9:ad:47:5f:fa:
a6:fe:07:a9:ab:5d:4a:24:3d:27:98:aa:fa:c8:20:c4:3b:35:
7c:25:6c:53:b0:16:7b:69:83:8a:70:47:73:a5:69:2c:21:53:
c0:ca:7a:0f:c0:27:99:01:9f:e0:64:16:8d:79:d4:f0:e3:36:
e1:fe:ee:da:29:fd:99:e7:b0:d8:47:ca:2c:6a:a3:ee:b1:98:
f6:2d:4c:06:12:2e:6b:69:ca:bc:1f:94:bd:b2:b1:66:c4:86:
d4:d4:6f:49:24:45:ac:37:3b:50:5f:74:47:71:d4:44:7c:a3:
22:7d:dc:83:a9:97:d0:70:0e:11:17:b7:c9:95:ef:37:d8:5d:
ca:8c:ad:a7:f5:3e:90:4a:54:d5:94:2c:d2:26:dd:12:d3:6b:
f3:45:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:47 2025 by rpki-client