Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52477c7-0794-341d-9941-964a023be6a1.roa
File: d52477c7-0794-341d-9941-964a023be6a1.roa (raw, json)
Hash identifier: M15xEssBQBvgvtm1Lcbsf9u/aUEaFVMmNEhWcMXfCxA=
Subject key identifier: 10:5E:0D:E9:F6:01:12:3B:8A:8F:F0:AF:19:83:94:7E:BB:C9:66:A3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CB3691F213F7339E60E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52477c7-0794-341d-9941-964a023be6a1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.39.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:b3:69:1f:21:3f:73:39:e6:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3f56ec9a-89f0-421a-9be4-6d3997769453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:a4:8b:8c:29:ad:37:7b:d6:10:43:12:1c:
80:83:7a:08:e4:70:49:cb:07:e4:4a:c0:80:ac:80:
3d:01:ca:ef:b0:66:51:63:dd:97:67:fa:5c:13:a4:
0d:d3:23:52:0b:d3:a5:1e:bb:dd:fe:7b:37:e6:9c:
31:f7:5f:63:5a:e8:f4:9a:43:16:90:ef:a2:48:bb:
28:6f:a9:40:f7:0f:d2:b9:d2:78:72:94:e0:6a:36:
1b:6d:34:50:6c:a8:ab:be:26:57:34:f1:a3:6d:0f:
ed:c3:22:f5:45:77:b0:6b:cf:20:ff:85:fe:71:5b:
cf:8b:85:fb:ef:26:50:26:c0:32:e4:52:08:c2:13:
b6:9c:27:ff:7c:3b:06:af:21:30:53:b0:f5:26:74:
2c:cf:7a:77:ab:8f:25:89:60:f6:26:59:26:83:6d:
cc:3d:94:4b:78:7a:44:c2:4f:b0:84:2d:6b:39:70:
de:0c:4f:a4:89:22:67:fe:c3:5c:58:36:a6:cd:07:
8f:62:09:e4:fc:62:29:a6:0e:1a:d7:ec:85:a5:43:
71:d9:a1:a3:97:45:46:c3:33:a9:47:2f:2b:f4:ed:
25:b6:d2:7c:20:76:fb:6a:7e:77:9c:a8:36:75:66:
42:ad:da:fc:ff:9d:c1:8f:c1:b0:96:d2:23:15:b2:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5E:0D:E9:F6:01:12:3B:8A:8F:F0:AF:19:83:94:7E:BB:C9:66:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52477c7-0794-341d-9941-964a023be6a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.39.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:00:2c:c4:70:f2:dd:91:4f:97:16:f0:2a:20:ad:f8:1f:1e:
ef:9f:f2:4b:c2:67:38:dc:06:32:bc:cd:4a:5f:1c:2f:5b:ca:
23:38:e7:34:69:84:6a:37:29:b3:e1:e4:1e:bf:e7:55:4c:91:
d6:ed:cf:1f:e1:11:cd:a4:d2:c0:17:df:8a:b1:ea:89:ff:dc:
cf:df:2c:af:ca:39:f0:8b:0d:35:74:63:ab:20:c5:4b:d0:cf:
02:75:30:c5:26:37:e9:cc:17:2e:2d:13:ec:21:ce:e6:4d:da:
46:84:b6:88:b0:c7:44:a9:0b:07:5f:43:8a:30:61:4b:8d:e6:
51:01:37:26:88:b4:34:a9:cd:fe:eb:6a:88:ae:a6:2f:23:36:
7f:85:d0:17:e4:91:3b:65:3d:5a:87:24:c4:3e:15:4d:ae:6e:
75:b4:af:df:fb:c5:30:f7:ae:e0:c3:71:79:ca:28:2f:af:e6:
d3:e5:92:f5:3c:1e:94:e3:b7:24:45:90:c4:95:6f:be:24:ae:
3b:ae:9d:d8:bc:57:98:56:6c:5b:83:eb:73:91:0b:e7:27:9e:
9f:43:d7:21:6e:66:2c:fe:d1:18:a3:6f:b8:b7:e4:52:7b:cb:
ce:ab:c0:15:db:21:90:47:ba:33:17:7f:6e:19:e1:0c:3f:9c:
14:3c:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:15 2025 by rpki-client