Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1a86b0-bf5d-3b0b-adaf-1fb994f997da.roa
File: da1a86b0-bf5d-3b0b-adaf-1fb994f997da.roa (raw, json)
Hash identifier: m4Zcm1oC3zndDj1FyxXjGiPgl52ayqO3AuYf9ELvznw=
Subject key identifier: EC:84:08:EB:65:A4:09:79:6A:DB:D8:6C:AF:C1:9C:9C:F6:4A:E0:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144080B56C2020B31496D680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1a86b0-bf5d-3b0b-adaf-1fb994f997da.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.34.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:80:b5:6c:20:20:b3:14:96:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8d40cf84-fbcd-4af6-8040-7b217456240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:ce:57:21:20:ec:54:72:53:bf:aa:4b:31:
8b:7d:90:e4:a8:4f:ca:d3:80:f3:8d:d8:21:cc:e4:
ad:27:5d:31:9f:d5:44:2b:a8:38:08:dd:da:65:87:
83:22:d0:d3:35:6c:4b:0f:7e:20:e9:52:8b:43:21:
6d:90:79:af:71:cf:57:27:bd:f6:45:2f:9d:f5:e9:
9c:7e:0d:7f:06:d2:83:10:e3:42:4d:58:e8:c9:3e:
8e:d5:9a:b1:b3:de:8f:37:23:b2:da:b7:06:70:5d:
39:71:17:77:35:65:a7:4d:2a:73:b1:3e:b9:75:5f:
a3:e8:ec:ee:ac:1f:30:e1:02:48:c6:c8:87:fc:c0:
b4:e9:f1:fb:54:c8:d8:93:35:0a:88:c6:5c:69:14:
64:c5:e7:ce:ff:56:86:15:cf:3c:04:2b:fe:3a:09:
44:80:2b:18:fb:94:9d:28:70:b6:53:77:e6:5a:f5:
e9:70:cd:e0:34:0f:3c:db:6d:80:f0:11:17:6d:70:
bd:42:7d:7a:1b:25:5a:0e:d5:9d:e8:bb:df:c9:f0:
05:7d:bb:11:8e:42:5d:8c:68:fd:84:f8:b6:d7:d9:
08:36:0e:48:88:cf:b7:45:ed:ba:43:a7:ec:8d:a1:
53:e2:e3:22:32:6f:cc:a3:94:99:d6:bc:35:39:8f:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:08:EB:65:A4:09:79:6A:DB:D8:6C:AF:C1:9C:9C:F6:4A:E0:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1a86b0-bf5d-3b0b-adaf-1fb994f997da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:5d:3b:c6:1a:79:52:a3:47:4e:ad:14:03:56:fe:81:56:1b:
2a:5b:39:6d:db:37:69:97:17:65:76:1c:da:73:84:00:d2:54:
34:3b:de:d3:65:83:c6:1e:05:36:d3:df:fe:73:87:af:f2:61:
2a:04:1c:30:05:e7:cf:94:bd:18:bb:bb:0a:fb:b4:0e:1e:b9:
44:44:16:04:ef:e2:b4:35:c5:7e:4f:6d:b6:74:b5:84:ee:7f:
72:61:f4:fe:25:c4:be:39:1b:81:3f:87:0f:11:b8:07:8f:84:
3c:1b:9d:df:33:74:df:00:ca:b8:6b:54:ea:4b:a0:87:4a:53:
d8:e3:04:8c:56:04:1e:05:6b:b2:95:b5:cf:30:0d:b4:1e:ca:
0d:f7:f7:05:3e:ab:35:fe:8c:f0:64:82:51:77:29:6c:d8:76:
8e:e5:38:ce:5d:a8:a6:f0:42:13:24:f9:56:9c:3c:34:88:34:
ad:0e:69:e0:28:fa:0a:db:e3:2e:5e:34:55:e9:2f:52:5e:09:
23:53:da:32:9d:8f:03:34:d6:a0:f2:9b:e4:e0:98:50:83:95:
cd:9b:1c:b0:82:1b:fc:1d:2e:a8:31:61:23:22:85:fb:c9:53:
91:63:c5:e5:5a:89:1e:04:31:18:97:15:0a:a7:72:e1:c7:44:
54:3a:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:12 2025 by rpki-client