Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b97363-f75f-3ea1-8afa-50b9d4492049.roa
File: 20b97363-f75f-3ea1-8afa-50b9d4492049.roa (raw, json)
Hash identifier: SRm4U/ZUBhAJvTzbUbfRKdFvFRf5MuEjw2V1pl5cTJQ=
Subject key identifier: 8D:7A:79:16:8A:65:22:5F:B5:65:86:E6:83:74:A7:B9:DE:39:90:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB160A3675E4D8203BC3AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b97363-f75f-3ea1-8afa-50b9d4492049.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.32.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:60:a3:67:5e:4d:82:03:bc:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=90c5b36e-ee1e-4c39-bb7e-fcf4977a24d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:ca:fb:50:9d:41:96:07:09:d8:aa:4e:b0:
6a:38:e0:4e:b5:01:6a:19:29:b9:64:d7:8b:3a:f1:
40:cf:97:3b:df:06:64:f6:8a:4e:3f:5b:7a:01:4c:
6c:68:dc:a3:21:80:4c:e4:83:5a:05:30:e4:b8:b1:
1a:00:07:d2:57:43:69:ed:b8:45:27:a7:e9:b8:1c:
2a:b6:a3:f8:55:82:67:30:53:0d:98:bd:0d:51:cc:
7c:ba:89:af:91:16:ab:0c:b9:6f:b2:52:28:29:3f:
29:4f:31:04:11:74:f6:5a:73:78:02:fb:16:a2:0d:
c7:99:9b:36:f8:22:5c:d4:17:fc:1d:5e:42:15:48:
37:23:ca:5f:8a:03:52:4c:28:40:d3:93:0e:15:7c:
de:a0:7d:58:5d:9b:f6:36:f5:23:98:1b:64:ad:b6:
21:c6:74:16:ef:cb:de:f4:37:4d:f1:64:b1:f7:c3:
bd:40:fa:a7:c3:32:ab:16:d5:ef:12:a6:47:7d:ae:
f2:aa:7e:db:d3:ac:99:11:1a:0a:3b:0b:b8:96:4a:
ef:1e:3e:59:4b:75:5f:bb:3f:e1:ba:af:c8:62:99:
78:4f:dd:10:55:26:41:44:45:69:91:59:d6:2d:1d:
1f:ca:08:a8:0f:c5:90:51:59:62:a4:22:e8:f0:d1:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:79:16:8A:65:22:5F:B5:65:86:E6:83:74:A7:B9:DE:39:90:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b97363-f75f-3ea1-8afa-50b9d4492049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.32.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:60:b0:8a:de:de:3d:e3:ab:cf:ef:73:2b:a9:83:73:f9:82:
ab:c1:f2:d1:6a:3f:c3:50:46:ba:7a:87:e0:2e:af:24:f9:70:
44:05:03:1d:ef:40:e1:1e:2b:bd:03:00:3e:27:46:e2:75:a4:
c6:d4:12:e3:34:0a:55:a0:b0:66:2b:f0:ac:fc:82:69:c9:c4:
85:f3:f6:2d:bf:5e:30:b6:cc:9e:b3:c0:0b:a7:c0:dc:c4:59:
8d:e2:c7:25:dd:ab:f0:3a:ef:25:c2:bc:4b:3b:28:52:fc:e4:
33:be:75:09:4c:aa:92:96:46:df:e9:3a:56:47:9a:6c:f3:a6:
45:3e:81:e6:c7:de:96:82:36:e2:9b:69:39:ed:55:a9:54:31:
02:5a:66:03:dd:e7:ff:55:61:6e:ec:64:ff:92:09:c3:82:82:
8f:1b:fb:a3:e9:cd:f4:ab:c7:ee:18:a3:df:cf:29:04:d9:01:
22:63:2b:3e:3d:77:7c:e7:06:0a:fe:c3:67:08:c8:f7:db:a8:
dc:85:fb:f2:2d:28:c3:6c:bd:73:a2:27:ca:0c:55:2e:08:f4:
2a:8d:47:23:19:68:b8:85:1d:38:e4:d6:a0:e3:c4:38:f6:fb:
ce:6e:3f:99:a4:73:e0:f4:ae:1b:a8:7c:33:e7:9c:af:6e:f2:
d0:fc:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:04 2025 by rpki-client