Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c2e8e1-06f5-3c35-ae46-d2b7dee1fd8b.roa
File: d7c2e8e1-06f5-3c35-ae46-d2b7dee1fd8b.roa (raw, json)
Hash identifier: 8t1JmphA0KpCbPmv2ti9vC2ORk83vfIz8nDIXH1IjY8=
Subject key identifier: AB:38:0D:67:91:C8:93:7A:90:D1:67:37:68:B2:AC:04:18:1F:43:75
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C116FE668E446547497DA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c2e8e1-06f5-3c35-ae46-d2b7dee1fd8b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.63.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:6f:e6:68:e4:46:54:74:97:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=cf000f0d-dba4-4683-b48d-b6fb59f1f202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:54:70:3a:73:12:7e:24:bd:76:07:02:aa:
76:fb:b2:a5:4b:d7:49:d5:ad:0e:51:51:c9:00:26:
00:16:33:86:c5:bb:33:c2:0e:ad:2a:be:0a:32:06:
51:54:27:41:37:ad:f5:b3:1e:1a:21:79:90:25:6d:
f8:0c:3f:64:74:0b:c2:c5:a9:72:58:ae:d0:86:17:
e1:98:98:77:a3:4c:d8:6c:d1:b6:28:73:8f:f4:0e:
35:29:f1:ad:ac:c4:ec:20:5d:b2:38:b0:e2:a5:2b:
f5:33:8a:12:ed:f3:0f:d4:c5:7a:df:9a:56:db:80:
d9:04:c6:6c:34:fe:f5:29:1f:3d:fb:2e:ea:26:e4:
60:91:6f:ae:bb:17:ca:58:98:1c:ec:10:20:d4:5b:
6e:45:d5:a1:24:12:87:b8:ab:bf:e9:4b:43:c6:ec:
dc:1f:1f:91:b9:ea:7a:02:b4:38:30:c6:8d:28:2c:
38:64:6f:4f:b4:74:46:64:c8:60:6e:21:1b:f3:c7:
44:9e:2a:74:9e:6a:ce:94:69:86:eb:88:74:a1:49:
cf:ca:7c:27:46:e2:7b:a1:9b:55:20:f8:7f:7a:5d:
47:5c:d0:49:97:94:78:cf:68:5a:ec:7a:2a:2e:d4:
a5:01:bb:ee:e4:ab:4c:14:bf:bb:65:2d:43:a3:4a:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:0D:67:91:C8:93:7A:90:D1:67:37:68:B2:AC:04:18:1F:43:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c2e8e1-06f5-3c35-ae46-d2b7dee1fd8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.63.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:53:f8:c9:e3:b6:d2:1f:28:cf:8c:b3:19:b1:e5:44:4b:f8:
8a:dc:ea:02:b1:dc:f8:57:8c:cc:0f:38:8e:5c:9e:c2:0c:26:
62:b3:2d:4f:26:56:fd:b3:d8:30:dc:1e:d0:9d:92:76:f8:b0:
18:ee:f0:95:e4:98:b5:2f:08:2a:7d:7f:5d:d6:ef:60:4a:6b:
83:cd:06:87:3e:a7:a5:75:9a:16:7b:9e:7f:b4:1e:3f:88:e7:
bc:53:fe:92:ef:48:b1:86:be:d3:8a:39:e4:63:4b:b4:be:f9:
82:1e:c0:67:55:ff:87:67:db:50:92:ec:20:64:51:dc:8e:48:
19:7a:05:61:94:df:dc:07:59:87:e3:ed:16:4c:23:0e:37:ea:
85:5f:e9:57:1a:8d:87:f2:66:e0:14:04:8b:34:e2:e9:ed:e2:
80:77:f2:46:09:51:44:bb:59:51:eb:59:63:a2:3b:4b:6a:cc:
7b:a3:50:9d:88:b5:cd:da:74:f3:ab:71:df:fa:0b:4e:38:99:
ed:49:12:16:a5:33:02:88:79:f1:12:b7:8b:12:35:76:94:73:
b8:96:d1:8f:ea:0a:ce:84:7d:d7:7f:74:a5:e9:81:e0:93:42:
c5:14:35:41:a1:cd:58:74:9c:dc:29:07:5d:4f:df:36:62:ef:
d9:b9:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:11 2025 by rpki-client