Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa
File: 242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa (raw, json)
Hash identifier: wnRbuQqhyCx33kGgcJeQNoLCcsCBD9Hg6S/zs9+1pbc=
Subject key identifier: 0D:4A:25:81:28:91:9D:6F:C7:D6:C8:58:0C:1C:08:6F:69:17:84:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF389E4166B2368EF3060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 98.221.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f3:89:e4:16:6b:23:68:ef:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b1622790-075e-4c16-a4c8-e0c73dc2630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:1a:af:8e:d0:5d:80:7b:fb:ec:98:f5:f5:
dc:00:5b:8a:32:c9:a3:bf:9f:5d:33:69:49:81:11:
df:be:fd:40:96:f0:9b:1d:5a:c3:13:ee:dc:d4:20:
8d:45:20:e2:37:b0:e8:c9:47:3e:52:6b:7c:09:94:
ea:57:e2:42:e9:be:bf:26:5a:6f:bb:94:11:f7:3e:
6e:bf:bd:32:5f:0b:6d:50:4f:27:d1:f4:75:11:e1:
5c:80:7e:68:7e:d6:fd:98:c6:5c:94:45:56:03:f0:
30:b3:55:9f:72:7d:35:ef:bc:f6:56:c2:69:fc:da:
0a:c3:b2:c8:e4:0d:8e:e2:fa:fb:28:79:3c:6a:3b:
0f:3e:53:73:9f:f1:34:34:6e:86:1b:d2:3c:8d:d1:
9d:d3:5c:96:6a:82:a2:ce:dd:5a:db:4c:03:83:a3:
97:6b:38:0c:fa:94:5d:ce:3b:f0:74:95:2f:26:fe:
2f:4a:fb:0f:43:11:d9:d3:32:2d:d6:74:e0:62:5e:
57:c7:6e:70:47:19:d0:ed:fe:d1:ff:85:c5:6a:79:
6e:de:b3:8a:8c:78:74:44:e1:ca:5c:f6:15:c2:4b:
30:8e:33:46:e0:ed:a1:51:f7:30:c2:f7:ff:c8:d4:
f0:84:40:99:5a:c1:01:0a:94:1f:9e:02:c6:4a:ad:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:25:81:28:91:9D:6F:C7:D6:C8:58:0C:1C:08:6F:69:17:84:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6f:69:ee:29:40:fe:fe:c5:fc:96:57:cb:5b:8b:48:01:c0:
ec:62:9c:d7:77:27:f2:95:c0:f8:b6:68:ed:59:0c:6d:69:35:
cd:ac:40:66:46:97:1c:13:dc:04:33:4f:cf:be:8a:86:3c:04:
78:de:7b:e9:1e:d5:53:ba:c9:6c:88:90:21:f3:31:f9:2e:81:
ca:bd:09:6b:70:e1:76:6e:24:0c:86:05:d2:7f:2e:a8:11:66:
80:8a:fc:ef:16:fe:46:43:bc:73:92:14:31:ad:66:62:d5:08:
6c:e6:75:00:22:a5:a1:e9:cf:28:9d:71:d2:97:92:bb:73:6a:
7d:a2:51:eb:43:c8:48:80:be:58:13:c5:85:45:91:35:a8:67:
49:e9:89:1e:33:3a:ab:80:f5:6c:4f:97:a3:51:5d:d2:60:04:
74:74:10:0b:44:ea:44:79:48:2d:f3:bc:0a:c0:e5:b0:39:70:
cf:1a:cb:43:79:ba:7f:77:4f:50:73:85:d3:91:6a:33:c7:13:
c6:ce:06:cb:d8:a9:e1:c9:ac:3b:b1:22:90:7d:b8:2c:b5:54:
e1:23:f2:7c:57:9d:39:0a:be:df:16:7c:f9:49:9c:37:f0:97:
5d:30:4a:c8:63:0b:67:56:df:28:18:7e:41:d9:31:b8:75:d6:
6b:c7:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:56:24 2025 by rpki-client