Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd523f9f-748a-396e-bf4a-0537759e6e68.roa
File: fd523f9f-748a-396e-bf4a-0537759e6e68.roa (raw, json)
Hash identifier: C/zGHq9oSKQ2RiFXc0D/BxWY4Y2dZFjdE12MpusRqcw=
Subject key identifier: F1:29:F0:44:3B:6A:28:A7:20:B6:BC:EB:83:36:9F:28:DD:F0:41:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C4C5430F0E553A2996680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd523f9f-748a-396e-bf4a-0537759e6e68.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.195.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:4c:54:30:f0:e5:53:a2:99:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d5ddce9f-314f-466d-ab7b-2f4cc69c4c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:3b:5c:11:4a:65:b5:80:8a:5f:14:04:dd:
6a:90:b2:90:cc:a3:4a:f2:f4:ac:1d:a9:85:1a:8d:
af:59:8b:3f:4d:a0:28:2b:d6:07:eb:51:6f:df:1f:
3e:ee:a4:37:b6:59:5f:4f:0f:08:19:d5:1a:f2:7d:
0d:00:9f:7d:9d:ab:44:5f:ca:6f:3d:7d:d3:0c:d8:
65:ec:af:08:19:9f:c5:87:6e:78:83:07:2b:cb:7b:
79:30:da:51:73:14:98:74:7c:3d:29:f7:54:f7:f5:
55:59:c3:4f:3b:07:1e:31:4b:db:b9:a6:91:16:84:
b3:1a:e8:b1:53:77:6a:24:b1:fa:67:1d:77:a7:6a:
84:39:65:10:ce:c1:21:07:04:31:68:f6:fc:17:b3:
2a:2a:31:87:ab:ad:08:06:41:97:ad:90:21:a1:be:
3d:f4:b7:45:06:fc:23:25:d1:b0:3a:6c:50:3b:03:
96:65:59:28:7d:23:64:35:8e:d1:2d:f3:da:e5:ca:
24:27:b4:b7:48:ae:a3:0a:c6:ce:e8:e3:ef:4f:d0:
06:ec:5c:fb:05:19:d0:89:d9:f2:de:38:20:92:e8:
34:fc:b1:c6:ec:2a:9a:a2:c0:f3:c4:c1:61:3e:0d:
f4:03:e8:81:31:55:dd:71:d9:bf:59:3c:67:a4:ab:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:F0:44:3B:6A:28:A7:20:B6:BC:EB:83:36:9F:28:DD:F0:41:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd523f9f-748a-396e-bf4a-0537759e6e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.195.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:4f:d1:f0:87:7f:8e:6e:7a:8e:31:97:31:b0:d7:c1:0e:2e:
32:73:52:a0:b7:3a:53:ce:f4:30:ed:d4:1d:57:a4:b0:4d:1d:
4a:b2:28:d3:27:61:f7:4e:2c:97:49:14:72:ae:18:c8:6e:db:
e3:c0:f3:ed:e0:79:c9:b6:4b:2a:e7:ad:d9:ba:72:93:dd:d4:
11:be:45:f6:0c:a4:23:38:08:a2:80:05:3a:ef:19:1f:af:ed:
48:9e:0f:a5:06:7b:3a:f2:19:67:d6:7d:ff:2b:07:89:af:55:
9a:95:08:4c:cb:a6:55:75:c5:82:77:e8:bf:a0:68:16:f7:65:
0a:27:c5:04:f0:27:7a:2f:2f:42:64:df:e7:6c:1d:80:0a:14:
d4:ad:3e:df:a3:2b:05:9a:70:e3:b2:19:ab:db:38:8c:7d:ce:
44:be:b3:39:61:1c:34:96:36:cb:aa:80:ec:0a:b9:ca:a4:99:
62:8f:51:36:e3:55:d8:4f:38:8e:68:ca:95:b0:8b:96:4f:4c:
d6:0e:17:38:08:08:e9:82:4a:a1:3e:60:b9:19:72:8f:d4:44:
ed:26:18:9e:9d:2f:03:cd:b2:94:3d:8b:62:03:32:03:e0:47:
71:5e:e4:5a:9b:d2:c0:b7:a1:3c:bd:18:89:6a:0f:71:ac:3f:
d7:bf:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:02 2025 by rpki-client