Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098431a3-ede1-3865-8d8d-147045095357.roa
File: 098431a3-ede1-3865-8d8d-147045095357.roa (raw, json)
Hash identifier: FIdVvPGgv/mgEkKhS7hoytM60OkR78jDNJCw61lnJnE=
Subject key identifier: B1:3E:E1:79:AC:54:47:6F:5C:6B:01:45:2D:8E:B3:91:94:92:09:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6731AF15780703971080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098431a3-ede1-3865-8d8d-147045095357.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.252.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:67:31:af:15:78:07:03:97:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=a5c25e61-1354-4360-84f1-f383cb4d8fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:e6:48:ea:b3:b5:49:d0:91:62:9a:bd:74:
83:34:85:bf:b9:e6:18:ab:cb:30:e5:27:33:13:bc:
aa:bd:95:1e:e8:42:41:a0:28:17:69:cb:59:85:a1:
ad:7e:56:f6:fb:56:4f:83:6b:60:67:be:d9:d8:54:
77:26:15:6a:b4:a7:ca:82:7e:d9:47:8c:f4:e5:f6:
99:62:df:1a:de:64:78:30:91:96:85:b1:6d:b2:5f:
5f:aa:40:c1:2d:10:5d:ce:39:44:4c:74:70:70:05:
49:d0:77:19:67:50:7a:27:88:a0:f0:c9:c9:e3:46:
a2:26:ce:56:9d:7f:fe:df:82:f7:68:de:46:6d:f7:
50:3c:06:d9:6f:96:d1:bd:90:45:22:31:6e:fc:bf:
fd:89:a6:7c:fa:36:6c:19:80:33:81:55:9e:cd:2b:
10:18:74:0f:4e:8e:6f:0b:bd:b1:69:36:9e:f7:82:
17:96:f0:2b:45:53:2f:78:c0:8b:5d:9c:26:35:0a:
6d:69:d6:92:07:de:ee:d0:bf:f7:b7:9e:6f:fb:f3:
5a:1e:a5:4f:51:4a:63:ab:b3:10:96:04:79:62:b7:
9e:8f:9c:78:2f:13:c5:af:a3:20:28:66:9e:43:04:
bf:a2:ca:da:09:c4:84:19:82:a7:d6:5e:b1:df:92:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3E:E1:79:AC:54:47:6F:5C:6B:01:45:2D:8E:B3:91:94:92:09:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098431a3-ede1-3865-8d8d-147045095357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.252.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:44:00:df:98:f5:d8:fe:0d:f9:49:50:22:95:0f:4c:7c:9a:
96:41:3b:c8:53:08:9f:7a:2d:81:88:c2:4c:d1:20:81:96:da:
83:19:86:b6:f8:d2:e6:c0:03:bb:03:2a:2a:d0:d0:66:0e:cb:
3f:0a:b4:b4:fe:66:9f:0a:e9:a6:fb:69:2b:3f:20:c8:3e:3f:
44:a9:16:b1:e0:68:24:d1:98:0d:20:2b:dc:e0:ef:d6:74:df:
8a:bc:cf:06:3b:ef:80:68:27:69:bf:d9:a8:58:1b:23:91:70:
b1:30:d4:4a:f0:de:51:31:f7:90:ad:3b:d3:56:87:14:20:9b:
33:62:6b:da:c8:bb:a2:d0:e9:63:97:e7:60:f0:9d:3d:96:9b:
4f:4d:54:f6:21:f4:af:c7:ae:ba:ab:2c:d9:c9:c4:15:a8:40:
15:8b:9e:67:b5:f6:bd:29:4d:d8:dc:49:56:17:50:27:6f:0a:
ca:74:cb:f7:bc:ab:db:6d:03:a7:e6:4a:52:83:8d:d4:e5:65:
2f:6d:0d:04:7b:c0:6e:95:b1:bf:f5:41:f5:4c:cd:e2:7c:68:
27:a5:3a:5f:dc:e3:05:3f:7d:a6:ee:2a:12:57:c3:55:ba:06:
dc:66:4a:4d:4d:3a:4e:fa:95:0c:dd:a3:bf:1c:00:39:f0:b6:
b7:13:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:11:31 2025 by rpki-client