Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec4f8e1f-c97e-332b-880f-39f22e3abdee.roa
File: ec4f8e1f-c97e-332b-880f-39f22e3abdee.roa (raw, json)
Hash identifier: jqV09BSUJWtYfIX5i4z/+e+0bHSwhi4HFZSwGEJmkaM=
Subject key identifier: D8:E2:E9:D6:EE:0A:04:67:69:DE:45:9F:B2:97:B8:AD:CF:13:37:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F9C579C517CD4F2AB5700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec4f8e1f-c97e-332b-880f-39f22e3abdee.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.209.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:9c:57:9c:51:7c:d4:f2:ab:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1a52345b-4524-4d96-8f96-5745888b2e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:4f:50:b1:dc:45:1f:51:91:55:b1:e4:71:
05:c5:a0:81:3d:2e:74:d7:03:df:1c:02:35:9e:4c:
ca:5d:f0:c5:a1:11:50:0d:f4:5d:c4:17:bd:1c:a5:
0b:38:b0:b7:e5:05:f3:e6:67:2e:e7:e8:ab:c9:03:
7c:1a:89:02:62:cb:51:7c:57:2d:57:3a:76:c4:2e:
6a:b5:f7:78:9a:c0:b2:b6:c5:fa:ab:d5:f4:d8:62:
ee:60:2c:08:5a:76:7f:f9:ef:6b:c3:e2:24:ee:ea:
bc:08:24:80:83:48:be:04:59:4d:4e:86:21:d6:ec:
6e:3e:13:62:df:eb:70:fc:a5:f2:d5:ac:d1:06:a2:
84:e2:ea:f6:1a:9e:da:61:9c:aa:72:7a:06:d6:78:
df:a7:b4:34:e9:66:6f:dd:fd:37:0e:bf:50:b4:09:
e9:dc:fc:b1:b5:b7:f2:14:69:53:58:df:28:45:c3:
ca:88:20:62:fc:e7:aa:fe:fc:a6:07:11:da:86:4f:
4c:b2:a8:f6:49:45:c0:2b:c8:b9:79:75:0a:ea:3a:
d1:2e:09:37:43:3e:65:97:4e:67:06:37:2f:37:72:
da:68:2f:34:7a:b1:e3:e4:ed:30:4a:ce:73:d7:1a:
bf:54:ad:f0:63:4a:3d:e0:a2:10:58:82:72:60:6c:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:E9:D6:EE:0A:04:67:69:DE:45:9F:B2:97:B8:AD:CF:13:37:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec4f8e1f-c97e-332b-880f-39f22e3abdee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:cc:8a:82:35:43:2f:b5:fc:f0:f9:00:d4:61:77:d0:35:84:
d7:5e:38:67:a4:44:00:c4:f3:cf:e8:24:2f:4f:af:c7:1c:44:
42:e8:fc:d5:ac:74:0b:53:fe:f9:9d:ca:26:ad:de:0d:e4:09:
31:87:14:2e:4b:20:3f:d0:90:23:cd:9b:36:4e:39:c4:39:e3:
4b:06:e8:a6:af:db:34:b7:94:3a:95:d7:dc:b1:a5:78:2e:bc:
d5:16:8a:9d:68:e0:9d:0f:1b:9f:ee:94:dd:b0:ec:1b:76:c3:
cd:91:da:3d:e2:ef:9d:1b:7e:e8:d6:2b:22:83:72:80:3a:dc:
3b:3b:f6:fb:11:ea:d9:e9:29:12:0c:9e:1d:28:c6:3f:1b:ca:
d6:78:5e:a5:46:77:f0:3b:42:99:b1:0c:b8:2f:d3:31:5e:02:
fb:81:b5:8d:25:97:1a:46:3a:cb:04:3a:08:69:26:6e:c5:17:
f1:fc:32:c1:5c:fb:1a:a7:d6:ec:57:df:33:76:20:51:e7:24:
6f:b3:b6:2e:9c:b3:2c:f3:be:97:68:06:14:f2:f7:6b:71:9b:
fd:b5:61:f9:68:5c:22:36:db:62:28:16:90:46:69:f3:f5:c7:
66:07:9c:cf:06:c7:9d:75:d6:e9:0a:48:3d:44:29:bb:2f:3d:
2d:35:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:27 2025 by rpki-client