Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f979d9a2-a5a6-3e49-b67c-f0ef2fc509e2.roa
File: f979d9a2-a5a6-3e49-b67c-f0ef2fc509e2.roa (raw, json)
Hash identifier: EVtD6Q+EFDSZFmxZIek1nKudpTlwSYeAdmBAvSWBJBY=
Subject key identifier: EC:79:F8:FC:D6:F3:4C:E4:D6:57:EF:45:35:80:40:9F:FC:4D:37:1C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CA217D01147D7E1939300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f979d9a2-a5a6-3e49-b67c-f0ef2fc509e2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.201.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:a2:17:d0:11:47:d7:e1:93:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=af9085ca-555c-4ee0-8a3c-1fc2334d3290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:74:a2:6b:39:3c:fb:fa:5e:00:73:c9:5e:
8c:2f:c9:85:75:56:bf:3c:75:ed:23:1b:e6:90:a1:
23:25:09:af:7f:60:59:de:4b:d0:1a:77:63:f0:e5:
60:b1:d4:fb:8a:66:2f:66:46:9c:34:c7:52:3a:38:
f6:27:16:82:9e:82:d6:87:22:0c:87:a4:6f:06:5a:
19:39:29:ce:d2:fe:1a:8b:7a:80:c5:04:e7:a5:f6:
41:f7:45:50:22:c2:bf:6f:a8:f7:a7:c7:aa:3f:86:
77:5a:43:85:d3:43:59:c1:d2:05:81:89:3f:1a:c1:
bd:a3:1b:69:24:81:89:3a:e7:19:2e:bc:9c:87:30:
84:fc:4d:f7:9e:72:e2:7e:b0:29:de:8d:d1:82:af:
f1:e2:ff:74:e5:11:b5:d9:fe:19:6d:61:17:0c:77:
bf:91:c4:51:67:31:7d:35:5f:0a:13:0c:c7:59:cd:
63:6a:b9:46:4b:ea:0c:31:04:51:d9:3b:55:6b:31:
34:2b:65:ea:14:36:a3:a7:4f:e5:41:fa:99:3c:25:
9c:3e:8a:fb:38:9d:a3:d7:56:aa:be:4f:6b:ed:b7:
4e:c1:51:10:95:36:8e:02:63:1d:3d:a9:ff:e8:5a:
ad:6b:be:c1:e7:23:0b:0c:17:cf:fa:13:e1:ad:16:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:F8:FC:D6:F3:4C:E4:D6:57:EF:45:35:80:40:9F:FC:4D:37:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f979d9a2-a5a6-3e49-b67c-f0ef2fc509e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.201.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:9f:fa:81:14:10:b9:90:85:d8:14:9a:30:95:8a:17:81:23:
ca:44:d7:1a:9f:a2:40:5b:eb:7d:c5:31:19:97:ae:7a:b7:ef:
f1:57:6d:97:6d:9a:89:1d:7a:51:d7:b0:67:a2:08:71:df:6e:
70:ae:ce:95:cc:5e:10:ac:57:7c:43:1f:47:a7:00:60:eb:bc:
49:78:9c:10:3c:61:cb:1e:15:a1:c4:87:a9:55:10:09:32:92:
f6:94:7f:43:f9:07:4f:28:64:a2:6b:ed:c4:0b:33:32:bb:71:
5b:93:84:ac:1b:73:8d:2d:49:ec:23:a2:1c:b7:da:ab:6b:b9:
6e:d3:a8:c5:d2:92:6f:3d:d9:da:d2:43:64:e2:92:1f:49:f6:
1e:fe:73:44:58:29:92:4c:d4:a8:33:4a:b7:07:f6:30:bb:c4:
5e:c2:c4:20:89:5d:7e:15:8f:8d:15:d2:9b:a4:1d:00:19:4d:
ae:82:35:ce:d6:d9:66:be:5c:23:a2:e3:9d:96:b3:67:7c:ce:
f4:21:b8:d1:1d:62:58:2e:c1:b1:60:58:af:fb:7c:28:2c:9b:
a7:16:e0:d8:be:a3:6f:47:97:3d:d7:4d:d2:e8:30:23:32:41:
cf:2e:ec:9a:bc:7d:fa:8f:d7:c4:13:a2:2c:06:60:39:18:6f:
49:a7:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:21 2025 by rpki-client