Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f36d88b7-d00a-30d0-b971-88b0001a5196.roa
File: f36d88b7-d00a-30d0-b971-88b0001a5196.roa (raw, json)
Hash identifier: YQAIuDgofeivTP6UmYizrimr7+4dBXsRfsaLJB7mm6E=
Subject key identifier: 11:46:08:05:62:16:9A:78:8B:8B:C9:71:08:44:F8:14:09:52:C7:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144074E3646E881FE1CD3080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f36d88b7-d00a-30d0-b971-88b0001a5196.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:74:e3:64:6e:88:1f:e1:cd:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=98a97a1d-46ea-4000-a309-5682f4f3802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:65:ae:6d:db:ba:d8:d6:0e:69:0f:58:7e:
70:dc:59:2f:5d:31:c2:16:82:02:e3:b4:0b:3f:d7:
36:97:3e:77:80:cb:a4:9f:e9:a6:22:58:88:75:fb:
65:1a:77:2f:bf:0d:a1:4b:a5:6f:b3:86:c8:de:cc:
95:b2:08:25:a6:56:7f:ef:af:ca:dc:55:4d:d5:70:
9f:60:36:2e:e5:d6:c8:15:ea:3f:5a:fd:b9:f3:cf:
f0:8a:d2:1c:a7:e9:78:48:71:5a:15:62:f4:e1:9e:
9a:1a:fe:e2:6a:7e:2a:8c:22:64:aa:c0:1b:73:ba:
3e:a2:bb:98:a0:38:44:26:2e:3f:31:b0:7a:e7:87:
1d:6b:69:0d:9a:47:dc:7e:93:a1:18:65:61:db:ed:
8c:9f:a8:62:12:87:65:b8:05:9c:7e:b3:78:23:e3:
b2:79:84:0c:c4:5c:11:93:58:40:51:a9:0e:cd:16:
bf:d9:85:9c:4b:25:54:01:9b:e9:c9:e5:a2:35:cd:
c1:86:37:db:71:69:65:75:67:b5:3f:f1:f0:ae:fe:
c9:93:a9:7c:ac:13:75:4b:b5:da:27:c0:b7:ac:c3:
6a:2d:4c:5a:98:be:11:d5:53:f9:fd:a7:9d:f0:56:
1f:44:6e:ca:59:31:64:0b:3e:85:fa:53:98:6e:24:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:08:05:62:16:9A:78:8B:8B:C9:71:08:44:F8:14:09:52:C7:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f36d88b7-d00a-30d0-b971-88b0001a5196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:83:2c:f7:c5:98:d4:91:b6:7a:ba:a3:ca:4b:2b:a7:0e:ad:
2d:6f:4b:b8:45:10:7e:e2:39:af:1d:f5:22:88:8d:f0:f1:3c:
3e:53:88:f5:4e:13:41:a7:7c:47:f4:1f:ed:fe:e7:f5:ed:71:
83:a1:fb:df:88:bd:c4:21:38:5b:1d:85:8c:d6:b7:f9:2b:44:
61:d0:a3:b6:1d:6d:2e:73:8a:5f:27:ae:bd:f1:90:93:ff:5c:
0c:18:28:89:49:e0:f2:14:30:43:ac:44:49:cb:40:78:95:53:
56:c8:71:f3:fa:15:11:b0:f2:22:42:6b:15:12:b1:e7:1a:ef:
20:be:30:50:dc:84:a0:41:7b:09:99:c7:3f:5d:ea:0b:4c:51:
5a:57:36:71:b3:a1:84:a4:d8:1d:2e:ba:dd:24:81:27:32:da:
d7:73:d0:57:f0:c0:94:7b:40:72:f0:14:a0:8b:50:74:07:1a:
9e:91:5e:0b:93:c3:e5:b2:1a:49:d5:59:52:bd:90:8c:03:51:
2e:06:fd:70:cf:dc:63:25:ef:79:18:3f:d2:94:89:4c:c3:93:
c2:b0:aa:7b:49:2c:ad:55:35:fc:32:be:f8:1e:9e:eb:e2:b4:
13:35:c5:84:bb:75:f3:2c:11:fc:7b:7e:49:b3:cd:08:55:91:
07:6d:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:03 2025 by rpki-client