Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8da52e-f9ac-3a13-b2b4-562a18f4b438.roa
File: dc8da52e-f9ac-3a13-b2b4-562a18f4b438.roa (raw, json)
Hash identifier: qcSsz3bda6s9g13rb6Bysft1coQRbpBdPzpRroYfx6Y=
Subject key identifier: 91:5F:28:F7:A6:95:FF:9E:46:74:88:4E:BA:9F:E2:6A:95:F5:00:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144073A5BA761CCE163F2800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8da52e-f9ac-3a13-b2b4-562a18f4b438.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:73:a5:ba:76:1c:ce:16:3f:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e9d46f47-97cf-4906-841f-0256fc8389f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:d2:cf:99:4f:39:85:71:18:9c:81:bc:7a:
42:4f:fe:de:a5:c4:4e:c5:1d:f1:50:cd:39:fe:a0:
f8:87:93:36:50:3c:93:bb:11:e1:b5:97:98:b0:d2:
22:f2:00:9a:ef:f6:2c:61:8e:01:41:30:44:e4:bc:
56:9d:2f:e6:2a:84:80:73:5d:06:06:24:1b:45:0b:
6c:ac:32:f8:62:fd:bc:db:8e:46:87:ca:51:24:90:
fe:3b:9e:3a:4c:c9:c5:ea:37:eb:9b:36:10:01:e9:
95:9b:2b:1c:76:3c:61:18:69:f6:d5:43:74:e5:0a:
34:12:34:28:7c:69:a1:8b:6f:11:76:2f:5f:12:c0:
49:6c:53:88:46:8e:b4:9a:90:af:2a:15:d6:01:8b:
11:61:10:20:f8:fc:9a:a0:bd:e8:3f:dd:35:a8:45:
ae:37:6d:6e:4d:37:20:e8:62:91:dc:15:ac:34:00:
f5:b2:53:5c:b9:00:51:77:60:38:c0:ef:6f:e2:b3:
a9:c4:f8:1e:a0:5e:a7:13:f5:dc:cd:8b:ef:b7:cf:
db:1d:6b:e0:9e:16:24:7f:2b:69:7c:e7:e4:e0:f2:
4e:a3:1e:f7:dd:e7:dd:13:55:b4:b4:80:55:b2:ab:
41:f2:a9:33:ec:5e:8c:88:49:15:cc:1c:38:bc:e5:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:28:F7:A6:95:FF:9E:46:74:88:4E:BA:9F:E2:6A:95:F5:00:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8da52e-f9ac-3a13-b2b4-562a18f4b438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b2:ca:2c:e4:51:a1:0b:d8:14:67:98:d8:13:35:a3:c5:d6:
87:1f:02:83:aa:ac:b2:8e:b6:86:cf:4f:a3:12:4a:09:3e:ce:
7a:15:0a:14:90:bf:dd:85:7b:61:33:8f:a8:04:22:77:4b:dc:
b8:8c:2c:a6:41:4f:98:d4:eb:bc:9c:92:69:6a:2b:3e:c7:64:
b3:7c:61:6b:ed:ce:bb:0e:0b:4d:57:f4:6f:bd:e2:51:57:4c:
0f:02:92:5c:a5:dd:5a:39:68:22:5b:70:ae:ee:2d:df:bd:d4:
ee:a3:8c:07:77:f6:f9:c0:4b:91:ab:0a:4d:d2:fd:79:2f:4e:
b9:3f:a6:84:80:7e:a4:52:56:8a:ba:a1:60:49:42:91:30:19:
47:64:02:56:f7:79:4f:9d:c3:95:68:1f:76:b6:fa:94:ea:ea:
58:09:28:e6:1d:75:10:10:c1:65:75:df:11:d3:91:99:e2:79:
7c:3e:f3:a0:ed:62:05:6c:1b:a1:95:b2:80:69:e5:87:71:ab:
1f:19:82:56:15:6f:31:22:5a:63:09:9f:77:ab:5f:a6:ec:c8:
66:98:6d:0c:29:dd:f1:3c:66:c7:e6:e3:ab:b8:5b:ba:e6:f7:
30:f2:76:19:74:2d:f9:91:11:e0:58:6b:2f:c7:64:f0:83:36:
e8:60:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:43 2025 by rpki-client