Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa
File: db3cba64-f46e-3705-bc34-06bef8b2191d.roa (raw, json)
Hash identifier: WMhX+1bsXFiNcRfUhx/5rQJxOZYSF8uwVjCiY15AqNA=
Subject key identifier: 42:00:92:94:D4:E7:65:76:1D:97:98:64:56:5A:84:AE:5F:D4:B2:25
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584819CFE0D0910E36DA95D75C70
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 25899
IP address blocks: 98.142.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e0:d0:91:0e:36:da:95:d7:5c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=64c7c58e-9c73-4b46-9a6e-dc36cf17682d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:64:67:2c:42:32:64:a8:69:c9:6c:98:03:
11:59:3b:82:56:22:12:b0:02:fb:81:c3:20:ff:1a:
14:eb:a6:c9:86:9e:06:30:0c:01:79:a3:77:45:61:
f5:6a:f2:fa:3d:ba:7e:a8:c8:73:bf:9d:fa:24:ce:
00:4f:c2:65:54:f2:ea:8a:d2:26:81:1d:b4:6d:31:
64:a7:c7:13:66:d1:a8:cd:8a:d2:40:fa:10:8d:f6:
a6:a2:a3:af:ea:f1:3d:2f:cf:2c:f5:aa:21:2e:5d:
a3:8b:9f:20:3c:df:fb:fd:d0:4a:c9:46:57:7a:ab:
6b:5a:e7:12:9b:f6:7d:8f:74:16:bb:71:b3:7b:f4:
6f:ce:5e:a4:c6:2b:a9:56:20:e1:68:a7:60:15:d4:
6f:ae:62:7b:ec:2d:1a:d4:9a:36:95:2c:26:38:c3:
01:7b:d8:de:9f:c2:a5:63:ad:63:98:28:28:57:b6:
bc:66:de:22:44:ad:5a:01:a7:3e:fd:76:3f:ef:b9:
12:bd:0a:22:85:43:be:40:60:dd:de:3c:2d:3e:5f:
3c:19:f8:db:69:71:5a:9c:4c:5c:20:5f:f2:5f:d0:
43:4f:8c:49:e3:28:c4:7e:b9:71:9d:40:4b:50:76:
0e:af:fc:96:0d:f0:f9:c9:22:01:c8:ea:2f:c9:d5:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:92:94:D4:E7:65:76:1D:97:98:64:56:5A:84:AE:5F:D4:B2:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
98.142.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:de:21:0f:21:9c:53:5b:db:98:a7:bf:48:70:d1:3a:01:f1:
71:de:e2:27:cf:59:43:ad:39:a5:c5:d8:8e:a7:f2:96:d5:1b:
a7:4a:09:8a:ed:f0:ee:72:fe:05:41:0a:61:57:2c:9c:55:a0:
44:50:f1:04:e6:1f:e0:1c:66:e5:38:01:8c:24:d1:74:81:c9:
9a:35:51:50:4d:0e:e8:d7:ef:13:eb:3f:7c:24:d7:34:14:9c:
12:b5:7d:ee:5e:39:7a:1e:a3:47:51:e8:62:56:4f:ad:93:93:
83:33:3a:4c:0e:6b:c9:dc:3a:5c:40:d6:f0:56:2a:32:3b:01:
91:dd:d2:67:42:40:9b:03:55:cb:3d:e1:64:c8:ef:d6:dd:ed:
ab:be:8e:b8:93:09:1a:52:8d:ab:d8:27:ea:0e:73:c7:ef:e3:
e1:ce:27:8b:8c:43:e8:4d:42:c9:f0:d5:57:71:bf:20:1c:c6:
8d:93:9d:cb:73:d2:64:05:36:c1:b5:3c:5d:88:3b:24:6c:0f:
c3:ec:d4:4b:a7:36:86:e1:cb:1c:62:15:d5:07:40:de:4b:cc:
14:46:50:9b:c0:fd:53:31:26:e4:5a:13:71:67:d6:e2:ca:22:
c4:ba:e6:81:f8:52:89:c0:33:d6:e2:80:6f:aa:04:72:1a:8f:
95:c6:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:55:17 2025 by rpki-client