Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f1bdc3-fe34-36bd-9f7a-9cf7cb3fba05.roa
File: d9f1bdc3-fe34-36bd-9f7a-9cf7cb3fba05.roa (raw, json)
Hash identifier: YFE0D7gwznnX0741vLm/wX1SDvMgeCtN1110nFgyqe4=
Subject key identifier: E1:23:7F:00:3A:E5:87:B2:F9:AA:9D:C1:F1:B9:C4:62:C6:48:80:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1162057982E810826EBC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f1bdc3-fe34-36bd-9f7a-9cf7cb3fba05.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.227.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:62:05:79:82:e8:10:82:6e:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5a40aef6-d9cb-43c7-946b-e4af8c75ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:a9:7a:36:b9:7b:1c:2d:f2:8a:c5:27:c6:
cf:4e:27:c8:7f:08:38:f3:b1:f0:36:bb:46:a4:37:
96:85:e7:0c:00:09:42:f7:02:6a:13:70:b1:49:c1:
a9:ee:53:6e:d6:e2:77:21:0e:c5:50:a5:0b:08:1f:
16:e0:a0:2c:1a:83:43:df:d6:51:5a:4d:df:da:5b:
b6:6f:50:56:fa:2c:7e:9c:fd:04:04:dd:2a:71:c7:
10:ad:32:02:3c:54:fb:8f:b2:82:d0:af:62:9a:cc:
f6:b8:65:85:e2:35:37:d0:df:10:6f:53:3e:99:fc:
06:74:f1:de:66:cb:11:00:27:04:dd:2e:1e:f4:36:
1a:38:31:ba:7f:36:40:6c:f2:dc:21:b1:9c:9d:50:
22:51:b6:d0:43:83:43:64:08:7d:2e:a4:5e:4c:21:
ae:81:41:0d:93:4d:68:3e:ce:2f:e5:12:4d:ee:c5:
f7:97:ef:84:4e:42:77:9e:63:10:a8:9d:27:5e:0d:
9d:64:93:d4:37:0e:75:f6:f0:38:c2:4b:c3:38:33:
89:67:73:b5:e7:30:a9:2c:ca:60:08:d0:fa:0f:e1:
ca:87:8e:f1:80:60:87:c4:cd:88:40:4a:96:f4:2b:
fb:5a:16:76:05:c8:d3:3e:ff:72:f6:50:d9:c9:c5:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:7F:00:3A:E5:87:B2:F9:AA:9D:C1:F1:B9:C4:62:C6:48:80:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f1bdc3-fe34-36bd-9f7a-9cf7cb3fba05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.227.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:7f:2d:60:fe:74:1d:39:f6:a9:de:40:a5:6d:77:a9:6d:85:
3a:6a:f0:26:c3:11:4e:f4:f1:f1:cf:cb:37:b3:b4:fb:50:2a:
e1:eb:2a:40:06:c8:d8:92:bb:9e:92:55:bf:49:e9:b3:53:1f:
44:15:2f:75:1b:9d:8c:44:26:76:58:f9:70:e0:79:eb:3a:c8:
92:6d:c3:aa:17:a7:3f:92:25:f8:8b:2c:46:c2:9d:c9:2b:78:
39:32:75:c4:59:c6:02:cb:48:f1:3a:ae:6f:57:74:e4:fa:2f:
d2:e7:e2:3f:b3:a4:17:8d:fb:25:a1:f0:b5:47:e5:38:0a:47:
2b:63:76:c8:60:8c:2a:67:27:76:7b:c8:e5:6b:eb:1d:ba:a8:
a4:21:bc:53:22:b4:e5:4b:a2:69:c6:dc:ac:cd:a7:ae:1d:07:
82:04:a0:0a:e3:77:33:c7:e5:ca:f0:f8:68:d1:8e:c4:6f:50:
d9:0f:50:02:a5:ca:4b:39:2d:bc:68:59:d2:5d:72:80:0b:01:
8b:64:e6:ef:f9:c5:58:31:19:21:c4:5a:b1:48:49:bf:a0:c3:
91:0f:91:02:2f:0d:14:14:73:22:49:b4:18:d7:19:67:59:9c:
ea:9e:1c:83:87:c4:22:0a:bd:10:0d:da:27:b9:73:ba:d1:82:
02:4a:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:10 2025 by rpki-client