Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea4b86c5-e8e3-34b6-b099-2f5b13e8b00b.roa
File: ea4b86c5-e8e3-34b6-b099-2f5b13e8b00b.roa (raw, json)
Hash identifier: YfbissXx4driARSWXKQj5fgaiZe7LQ1x1hWoxBPe+Oc=
Subject key identifier: A1:00:6D:74:CC:5E:07:87:53:D9:9E:AC:47:27:42:D7:9A:13:5C:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1168D33EE80D095B16B580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea4b86c5-e8e3-34b6-b099-2f5b13e8b00b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.253.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:68:d3:3e:e8:0d:09:5b:16:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9ff733ba-b516-47f0-87d1-93be276d1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:c4:c2:b9:cf:73:e0:25:a3:0a:2e:94:73:
b3:62:8e:c9:cd:eb:51:30:6a:8b:61:7c:75:fe:21:
aa:9e:b2:2b:25:9a:fd:5a:8e:1f:19:d9:86:81:c7:
59:25:0f:ef:d4:fe:f6:fd:b6:ad:c3:fb:b9:5e:6a:
d1:59:a0:be:6f:62:48:7a:f7:8b:57:73:1c:89:e0:
81:77:78:41:b1:3d:2f:1b:bf:e5:11:15:e5:7d:b3:
ef:2c:12:65:d4:e1:2f:76:8a:c1:4e:89:22:94:b9:
52:68:cf:73:62:95:c7:4b:d2:dc:90:59:64:f7:de:
51:b4:88:94:08:0c:24:c8:dd:ad:eb:93:1f:2f:63:
20:f1:90:2d:05:c1:47:7e:ee:64:5e:ba:9b:fe:72:
76:fc:3f:07:cb:26:dc:a0:b0:3f:9f:61:54:6a:a9:
a8:55:f1:47:c6:9c:75:53:e0:02:db:e3:f5:5d:fa:
eb:4e:51:11:b5:40:af:88:46:1a:f1:00:9f:3f:18:
cf:34:e8:d6:28:6c:88:71:2a:79:71:df:d0:c4:73:
47:13:73:dd:2a:3a:90:2c:e1:14:13:28:85:65:ed:
3f:0e:15:29:78:48:94:da:57:cc:de:89:76:da:11:
a9:f7:20:a7:57:58:62:0d:4e:c9:95:78:c5:03:71:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:6D:74:CC:5E:07:87:53:D9:9E:AC:47:27:42:D7:9A:13:5C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea4b86c5-e8e3-34b6-b099-2f5b13e8b00b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.253.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:e0:ab:89:e6:ff:78:3f:2d:3e:bd:e9:cb:11:aa:9d:80:e3:
7c:72:25:82:f6:59:1c:96:10:3b:01:70:b2:12:b2:e7:32:b3:
48:26:a7:bd:7d:51:c8:56:68:f6:11:05:26:6e:fe:6b:af:1d:
04:fc:a9:01:e1:28:b1:32:70:47:3a:37:c0:64:43:6a:f9:3e:
d7:ff:f2:f0:31:31:78:2d:dd:40:88:1e:b4:91:f7:49:ea:34:
eb:b0:c6:63:89:74:c1:20:20:0c:06:2d:bd:f9:50:96:c8:08:
41:66:de:4f:76:98:f4:18:65:00:23:8e:4e:c7:39:ae:f8:57:
82:68:62:57:58:4f:a8:f4:3a:71:8f:e0:97:8b:f1:30:b9:8e:
fd:ff:6a:1e:1c:2a:1f:d3:32:ab:73:9c:a3:8d:9a:c4:99:78:
95:54:6d:0b:eb:77:d0:e4:9b:66:b2:b2:a3:4d:21:fd:a1:79:
6b:e4:df:4b:aa:35:62:d7:f7:b2:cc:d4:cd:bb:be:f2:0e:1a:
14:dc:43:d8:92:15:26:5f:af:c6:98:6e:63:13:f4:57:96:24:
32:c9:2e:af:2a:13:fb:6b:dd:ea:de:e1:75:36:f0:2c:24:a4:
bb:ed:4c:28:b0:b8:6c:39:d7:e1:d0:3b:2c:18:93:7c:29:60:
68:25:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:47 2025 by rpki-client