Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa
File: 21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa (raw, json)
Hash identifier: +7xJLwBVsbMcWT+Hibt2sdRqaSfvCNPtXgOGsVke5zw=
Subject key identifier: F1:0F:2E:23:7F:AF:C3:D4:4E:0D:4D:13:B3:2D:9E:BD:64:B3:6B:FA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1DB669E43D15B4B0107A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.234.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:db:66:9e:43:d1:5b:4b:01:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0dda5874-528b-4de1-9b3b-bef93c7447c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:2b:74:e7:e6:7f:06:3c:56:6d:96:a3:aa:
1d:81:a2:51:5a:db:fa:25:a8:9d:28:93:e7:ef:98:
26:af:13:5c:cd:82:e9:09:45:98:60:58:c2:ef:6e:
1b:01:a3:79:d9:8f:3c:92:0d:c2:7f:2c:c3:c0:02:
01:79:1c:f8:c2:70:1d:fb:15:a3:44:73:1b:b5:82:
35:71:d3:61:af:d5:30:77:e0:fc:49:33:91:8b:a5:
03:ec:70:c1:f2:af:6b:5e:25:21:e7:48:63:30:5b:
b1:bd:ce:45:36:70:7d:b9:87:0a:c2:5c:20:81:a2:
89:ed:7f:af:71:2f:04:53:10:f0:fb:6f:b3:c8:b4:
7f:c1:ec:8f:e5:e9:7a:a1:15:2b:47:a0:81:39:17:
bd:9a:db:b7:b0:d6:f4:fc:47:b0:fc:59:64:22:2f:
1d:cf:af:73:c6:9b:b6:b2:0c:a1:02:a3:8b:60:94:
08:93:18:85:7f:a3:8d:da:51:39:49:a0:fc:f9:a9:
31:2a:34:4a:c2:67:80:4f:54:44:5f:18:19:63:a4:
19:61:e6:54:9f:5f:95:fc:45:e4:c7:7b:35:4c:6e:
2a:46:67:d9:6b:b2:dc:ef:03:9b:34:13:82:7e:95:
22:00:b1:7f:aa:d2:c9:e5:9b:2b:e9:c1:30:79:0e:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:2E:23:7F:AF:C3:D4:4E:0D:4D:13:B3:2D:9E:BD:64:B3:6B:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.234.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:2b:2b:92:1f:9c:85:44:6e:d8:6d:c9:00:ff:0a:f3:73:ec:
26:27:51:54:8d:82:c9:fc:f0:4c:12:20:c4:6e:40:be:7f:d6:
38:b5:df:f5:ec:6b:e9:07:55:af:9e:e6:3e:6e:05:d5:de:16:
43:ad:65:38:3b:c1:dc:bb:d7:83:99:8e:61:bf:55:50:c6:46:
58:07:21:fd:fa:e4:5f:1e:cb:3f:d5:a5:92:6d:fa:24:69:c9:
bb:d6:e1:27:12:67:23:ca:14:7e:26:37:fe:69:e8:2e:54:18:
97:d4:fa:7a:8a:9c:76:a4:70:b4:cf:8d:ab:34:07:fb:72:a8:
96:08:e9:37:70:01:66:44:f6:09:40:13:6a:d0:16:50:4d:31:
1a:02:bd:9c:65:e9:ae:f0:43:d9:d1:97:c4:4c:61:97:d5:b4:
ca:60:66:9e:9d:63:ca:d1:12:57:3a:3e:c8:7b:9b:94:4c:e6:
b5:32:ee:0f:5e:bd:51:5a:89:86:ce:23:49:64:42:9c:17:d9:
fd:d7:99:d5:28:eb:db:c3:1a:f5:fb:ad:33:1b:1d:29:6a:2b:
b5:4d:f9:ab:a2:78:28:4e:04:c0:40:15:ed:42:c2:cd:e6:10:
64:74:cd:31:75:4d:f5:19:23:7a:2c:b4:9b:17:67:a2:cd:c4:
3f:d5:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:59 2025 by rpki-client