Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d5be5e-67ca-3f7e-8b3f-631e48548788.roa
File: 28d5be5e-67ca-3f7e-8b3f-631e48548788.roa (raw, json)
Hash identifier: SPn0s/zyJGfBVqT4Zr+QYCbZUiPQL47fpHJcrhiNmbs=
Subject key identifier: FD:87:86:66:5E:86:BF:47:6D:87:B4:1D:D8:22:9A:00:8B:A9:58:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7697ACE5D1A71F5A9D250
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d5be5e-67ca-3f7e-8b3f-631e48548788.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 98.216.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:69:7a:ce:5d:1a:71:f5:a9:d2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=262a2243-61cb-4300-914a-30185547aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:c2:ab:1f:09:cf:e0:9f:1c:55:23:39:b0:
c1:21:0a:ec:31:4f:a0:b8:c5:bb:3e:df:63:82:c0:
10:97:9b:90:cc:c5:2f:54:6f:37:54:d1:e2:8e:a0:
76:a1:fd:74:b7:32:5b:95:f1:6b:22:7b:c2:0e:a4:
25:80:c2:c2:1c:45:cb:99:b4:d3:8b:a4:f7:15:f6:
a3:9a:2d:aa:63:bc:f6:e5:9b:f8:d3:99:6d:2c:cc:
d2:9f:0b:58:eb:7c:1a:c9:01:d4:2b:1a:70:c5:79:
da:1c:71:5c:5b:76:18:44:ef:7b:85:ff:d0:73:92:
95:1e:d3:46:e9:e6:75:4f:6f:3a:ea:02:24:a1:6f:
33:e3:6e:15:df:9a:47:39:0a:6f:c8:fb:b8:b3:fe:
7d:39:97:bd:e0:f6:16:7f:4d:2c:62:f7:e8:d3:26:
03:17:4b:a7:53:6f:d6:17:40:ba:26:06:93:94:54:
e3:af:9d:e8:d1:f9:8c:27:45:61:d1:e9:b5:14:86:
a6:2e:ca:eb:52:a8:1b:6e:14:4d:b6:84:85:f5:e2:
e4:66:12:7c:1d:78:8e:4e:d1:b5:62:a5:03:aa:7a:
d5:b7:4f:47:9a:a1:24:78:73:e4:85:d1:52:a6:49:
2f:06:4c:23:30:33:4f:3e:db:c2:e9:cc:8f:70:d3:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:86:66:5E:86:BF:47:6D:87:B4:1D:D8:22:9A:00:8B:A9:58:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d5be5e-67ca-3f7e-8b3f-631e48548788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.216.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:df:c6:e0:0d:f4:f3:fd:d1:16:9d:70:9e:25:f3:18:9c:02:
5d:8e:4a:16:18:90:46:c6:1f:63:30:74:16:c8:f6:df:bb:40:
2a:20:3c:4b:a6:3d:24:d6:d8:45:94:47:c7:7a:db:34:d6:59:
cd:a2:85:35:e3:40:83:7f:12:76:b6:45:f9:65:94:65:0a:7d:
61:9a:a2:ab:f8:c7:f9:6b:7a:bd:4c:c6:26:de:d5:17:fd:dc:
5e:32:66:f1:0c:d8:df:40:a6:50:aa:a6:d3:b2:1e:87:c6:ae:
a8:f6:d7:36:02:34:ae:45:07:7e:87:09:c8:5b:76:50:c7:d0:
de:5b:1e:5f:fb:68:b1:ee:c8:3f:43:8b:74:54:10:06:00:6a:
f9:83:69:34:85:09:e8:75:c9:40:50:ba:29:c2:95:a2:48:03:
9a:8e:91:b3:dd:17:b0:55:e8:4e:5e:1a:b6:eb:4a:1c:93:af:
b5:ac:db:1b:6e:8e:f1:a8:60:03:64:66:76:8b:76:e4:fa:a3:
5d:56:39:51:b3:d0:f3:90:9d:d5:6c:e4:d4:16:37:aa:b3:5a:
01:9b:46:8e:2e:da:e6:5a:bf:a2:26:38:0b:b6:e6:bb:f8:b8:
40:f8:7b:04:e8:bb:1a:f4:c6:9d:8f:42:70:f1:4a:6e:de:b2:
c0:78:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:09 2025 by rpki-client