Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef600d52-6309-3348-be06-a112192b6d4a.roa
File: ef600d52-6309-3348-be06-a112192b6d4a.roa (raw, json)
Hash identifier: ENJdh/f4OA9pFYPTcBAlSrMXDPPnwHneMsBK9YTRXMY=
Subject key identifier: 4F:56:34:FE:4E:FA:A4:23:CF:6C:FF:21:41:16:37:17:0A:55:CF:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C105283FCC3B5A3E3F76A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef600d52-6309-3348-be06-a112192b6d4a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 98.33.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:52:83:fc:c3:b5:a3:e3:f7:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f5b2e080-a348-4b43-a7d0-eea4f731deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:85:c0:2d:bc:ec:61:13:29:7f:7d:a3:29:
df:d6:ad:a7:73:14:aa:cc:e0:ed:8a:82:e6:45:77:
50:e7:6f:41:35:ff:74:61:b6:fa:14:6a:ad:72:81:
7e:10:a5:87:ff:ed:b3:40:07:64:17:e1:81:2f:fa:
e3:b8:cf:86:20:85:fb:e6:90:02:4e:62:d1:5d:d2:
1c:fb:8f:d6:01:1b:25:f4:8f:4c:8c:1b:d3:26:82:
27:86:9a:db:15:3a:e1:c6:65:8d:c1:74:56:20:d8:
d0:65:0a:df:fe:ef:73:ab:ff:34:ac:4f:95:b7:f8:
69:55:7e:cf:08:de:f3:20:10:0c:b6:a7:74:e5:05:
bd:28:b5:51:c9:3c:bd:3a:d3:36:1e:52:0a:6f:1f:
07:cc:ec:fd:eb:d4:41:65:06:10:3e:27:49:f3:5b:
1e:3f:80:e1:f4:45:6b:15:d9:29:d0:40:09:b3:1e:
39:0a:da:ad:09:e1:49:51:be:1a:19:22:d0:c7:c8:
18:1f:22:1b:4d:13:d9:2c:22:7d:06:98:5b:62:de:
80:77:39:8b:67:5c:a2:0d:38:e7:a4:40:00:ea:23:
e5:79:5f:ba:7f:a0:d4:17:b3:63:cf:89:38:b3:fe:
4f:cd:2b:e0:f1:8a:18:1c:33:c2:36:68:45:22:1a:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:34:FE:4E:FA:A4:23:CF:6C:FF:21:41:16:37:17:0A:55:CF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef600d52-6309-3348-be06-a112192b6d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:54:7a:3b:39:cd:0d:a6:a3:15:47:84:c5:36:43:2c:53:7a:
d7:e4:fd:47:2b:04:72:22:48:ff:d9:27:cc:5c:31:01:31:ee:
0e:08:74:e7:25:fa:7b:78:0d:51:5d:10:06:4d:c6:40:b9:e4:
91:ac:79:a5:e8:0d:27:25:91:d3:37:5c:f1:b0:fd:bc:00:2c:
09:d7:c0:99:65:53:a9:8a:83:6d:d2:bf:d4:30:d9:70:dd:da:
7e:f1:85:f2:b7:d8:c7:80:70:f5:2b:98:66:cc:3c:82:1d:40:
38:d0:cf:c6:78:33:6b:24:ea:8f:07:6a:e3:ef:37:5d:d2:be:
96:f5:50:dc:4c:49:8f:48:7a:0e:62:17:23:ec:d8:a7:4a:cc:
1d:da:16:31:e9:fc:3a:eb:10:11:26:e7:69:ef:db:55:b6:3c:
9d:01:dd:15:f4:12:ab:22:49:dd:ef:d6:5f:ee:a1:af:b7:de:
df:d9:59:52:28:ea:1f:b4:0d:0f:58:20:dd:1c:2a:5d:56:e0:
8d:3d:37:58:a6:b4:d7:30:f1:4b:48:ac:db:21:db:8f:0c:31:
ab:75:92:c2:b3:aa:b7:a7:73:8b:5a:ff:9f:83:99:f0:ea:b3:
0a:ab:b7:0c:65:44:e3:45:30:a6:9f:9d:1b:33:24:8d:63:b2:
a4:db:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:19:45 2025 by rpki-client