Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43cdd6e-006e-329f-9e7f-f240fca2566b.roa
File: f43cdd6e-006e-329f-9e7f-f240fca2566b.roa (raw, json)
Hash identifier: ZnyHbNonaKCFFxNOHJWhb4vkS/GYI8Lr+tCQ2MKX760=
Subject key identifier: 94:BE:C3:2A:F0:21:DE:A8:10:87:AD:C6:C3:17:2D:68:EF:0F:F1:40
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11559389DFC3267D9F9B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43cdd6e-006e-329f-9e7f-f240fca2566b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.220.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:55:93:89:df:c3:26:7d:9f:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c96a68f0-5149-4ed3-8092-06dfdf8434a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:87:88:2f:51:bc:1b:82:e2:ff:27:f4:0d:
b1:9b:5f:d2:cd:f1:77:e8:42:34:a9:13:c4:20:0e:
3b:39:f6:15:45:84:c0:94:8e:2a:e9:8d:22:56:54:
c9:98:28:a4:ba:d3:ae:c8:45:e5:82:03:94:77:b8:
d5:f3:0e:60:32:e1:d6:9d:a1:c6:63:a8:41:05:13:
fb:09:13:c5:2b:e6:97:97:b6:7a:fe:c0:d5:e9:0e:
21:0f:cc:ea:e4:07:4c:23:a2:f5:8e:84:f0:69:6d:
cf:4f:ea:c3:47:7a:33:42:85:39:34:d3:ab:15:52:
ca:de:ed:3f:b4:fa:2f:f1:91:27:e5:ab:c1:9d:45:
95:3f:82:63:f4:86:45:71:fd:30:a3:8c:5a:88:86:
74:04:ef:57:f9:3b:5b:bb:c0:8b:8e:b1:16:28:21:
26:bd:1b:18:fb:61:2c:dc:b4:40:2d:e4:2a:6f:dd:
74:84:b0:65:fa:39:62:7e:4f:40:0e:0d:19:ab:23:
00:e4:ca:f0:d5:58:bd:59:f3:43:62:b4:fc:59:03:
52:5f:d6:bc:58:fd:ff:75:48:0a:9f:84:1c:93:f3:
12:f4:ea:38:11:2e:59:60:7d:35:92:2c:ff:54:b2:
28:b8:ed:67:07:b2:95:c6:99:6a:3a:b7:5e:6d:e2:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:C3:2A:F0:21:DE:A8:10:87:AD:C6:C3:17:2D:68:EF:0F:F1:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43cdd6e-006e-329f-9e7f-f240fca2566b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.220.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:47:23:9d:82:87:cf:e7:9c:85:5d:94:72:a6:67:12:42:6b:
0d:be:d6:6f:fe:a7:68:98:fa:09:05:86:82:ed:2b:d8:97:b5:
7d:69:09:af:24:86:08:f1:12:bc:33:1e:3c:73:60:28:ad:3e:
81:b2:ef:58:e0:11:31:99:28:dd:20:6c:e0:82:a2:05:ba:bc:
bc:87:7c:8e:3f:24:e9:ec:3d:29:3a:6f:ec:07:6b:0a:fb:75:
b3:ad:1d:0b:8f:53:65:29:71:8f:f4:d4:b8:36:0f:c4:7b:59:
e8:b0:ca:2b:e2:17:c7:3a:57:6f:7e:fa:e8:74:e6:8c:32:66:
b7:3b:c0:b5:78:02:48:98:c6:f6:5f:4b:56:ea:54:52:b3:1b:
56:25:db:88:97:0d:97:26:48:e4:ed:fa:f9:2a:75:17:5d:55:
4e:f9:10:e0:29:f5:f8:17:1a:92:6b:34:6e:77:5e:49:1a:e5:
06:ae:9f:26:ee:82:73:20:b0:a1:19:e5:ed:87:78:2b:d3:84:
04:7e:57:c5:45:38:a0:30:12:0a:d3:3c:8e:39:88:12:61:00:
94:7c:2d:2e:2e:43:1e:c2:4a:bc:2b:7c:9f:22:41:5d:c9:1b:
e3:17:ef:74:df:e6:d2:73:8f:ab:a7:d2:1f:69:ef:d0:93:14:
bc:6d:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:19 2025 by rpki-client