Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaac84d9-463e-313a-a244-3e976297c5d3.roa
File: eaac84d9-463e-313a-a244-3e976297c5d3.roa (raw, json)
Hash identifier: +cbHEY3cJqD4Z9sfC6wVYx9UH2tZescPke4fz5uhXPQ=
Subject key identifier: 45:20:FF:10:0B:FA:EA:DC:CC:42:D8:85:5A:EA:5A:FF:C5:DA:30:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144092002DF01FBD9B6A9090
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaac84d9-463e-313a-a244-3e976297c5d3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.44.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:92:00:2d:f0:1f:bd:9b:6a:90:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=00fc0468-62e5-49a6-bfda-6a0cb9b00cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:9c:69:7a:d9:f5:03:3c:10:fa:37:f4:7c:
bf:f5:52:f7:eb:50:50:ae:82:08:16:84:43:9c:f4:
b4:35:3e:0a:7b:d0:39:f3:8b:11:cd:4e:48:b1:06:
e8:e4:cd:ae:d6:4f:06:02:57:41:61:4b:e5:ce:7a:
61:67:30:d0:18:db:99:cd:33:6a:14:bf:c4:bb:bb:
f0:7c:93:d1:79:ef:40:c7:b4:66:38:f6:e5:0b:b6:
0b:0d:66:d1:08:85:e8:bd:53:49:dc:a8:6a:ad:e4:
cb:02:ad:84:9d:d1:98:9a:ca:67:d2:df:ca:27:52:
b3:a6:8f:ac:9c:c0:0e:5e:10:be:3a:01:dc:3d:2a:
b2:ec:3f:76:27:8d:f7:8a:c0:8a:51:59:60:63:cb:
66:a1:d1:d8:7c:67:18:06:e0:22:c7:de:1e:fb:78:
55:70:cf:21:e6:93:ea:a9:75:0f:b4:2e:0f:5d:5e:
6d:09:95:86:27:b9:3a:96:e9:ac:22:bf:3b:ba:7f:
ac:ef:e7:2f:b1:f5:dd:60:9d:a0:92:ff:10:c1:05:
42:cd:42:65:38:4a:ef:eb:6e:2a:66:1f:cc:40:f7:
5e:de:b4:da:79:a5:b9:1a:57:2c:06:8e:44:99:8d:
3f:60:79:08:a5:d4:82:dd:64:f4:5f:6e:67:f9:1e:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:20:FF:10:0B:FA:EA:DC:CC:42:D8:85:5A:EA:5A:FF:C5:DA:30:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaac84d9-463e-313a-a244-3e976297c5d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.44.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ab:b6:1b:e1:fb:d7:9d:1e:da:b5:7e:34:05:e6:c0:71:57:
06:7d:5d:6b:ce:b6:9b:8c:7c:d0:f4:cd:76:aa:9c:e8:49:53:
d3:9d:37:4e:d8:61:95:07:9a:6b:a9:1b:c4:d9:68:1d:d1:c8:
f4:de:a8:3c:3d:5d:7b:7b:dc:d3:28:13:62:86:85:59:03:1b:
7b:4a:06:53:50:56:be:b8:ee:11:46:62:83:1d:b7:67:0b:e1:
98:d6:e8:07:8c:03:aa:e0:ec:fc:d1:2b:af:10:73:42:ed:16:
a3:45:37:c7:7e:c4:69:7f:2f:8a:15:d0:41:54:a1:b4:df:07:
16:14:02:f6:3d:05:f4:57:b8:62:0d:61:51:f7:c2:bb:59:99:
46:c6:0f:e7:2f:6a:1e:a5:9d:58:de:dd:49:2c:54:f9:da:51:
be:21:95:89:99:d0:e0:e7:21:89:5a:b5:67:1e:05:f6:45:72:
ee:be:c4:af:e2:b9:7f:08:a4:09:24:5b:ab:10:67:37:28:6f:
35:b6:ee:fb:81:94:9c:8b:8f:f5:f7:d1:91:6c:b2:1e:6d:93:
57:ea:d7:35:80:b5:e4:0a:99:51:29:f6:37:eb:29:61:5b:12:
99:eb:08:fe:8d:55:83:22:80:88:ee:74:07:79:49:67:d0:e7:
95:12:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:46 2025 by rpki-client