Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa
File: 2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa (raw, json)
Hash identifier: VgVIyUKQ9VIdJGtbOKRgPc4aUAfC1A2gt2p14VVsEDQ=
Subject key identifier: AA:BD:79:19:D5:18:DF:4E:E6:F1:E1:DA:BF:0F:22:E8:FF:00:86:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DD22C2D1B5E3380D9B840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 98.61.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:d2:2c:2d:1b:5e:33:80:d9:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=c9bb80a1-9b66-4fef-a2ac-8217cad88ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:b3:ab:58:f0:66:40:3a:03:fc:9a:60:4c:
d6:6b:b2:69:87:d1:5a:c3:73:bd:32:80:49:6c:dd:
68:89:b2:b9:f8:28:bb:19:89:13:7b:bd:b3:05:8c:
3a:3c:e7:c6:26:06:4c:30:e2:94:6d:13:6e:ae:33:
fb:84:b7:e8:b3:8b:a3:3d:5a:32:a4:0b:fb:d0:be:
fe:f3:ce:23:75:ff:7f:a1:69:5e:91:1f:25:9d:49:
6f:7c:16:8a:e8:02:2d:14:72:16:6f:0e:09:4c:d4:
31:be:80:44:95:3e:d3:64:89:20:03:64:03:9c:14:
5a:3d:af:33:d9:3a:21:4e:f0:68:ab:00:d9:de:76:
25:17:5f:2f:72:e8:51:a2:b6:13:c4:73:88:f1:4a:
4d:ed:99:36:a6:0a:68:fb:ed:22:ac:db:7b:91:8b:
f0:65:31:42:82:b2:fe:d0:32:59:45:57:c8:08:a3:
d9:d0:8e:cd:ec:e7:14:40:43:85:6c:e5:8c:66:b6:
18:cc:70:1a:dd:c3:8e:5a:c6:4a:0a:91:21:3a:95:
b5:b9:ef:ed:e3:5c:6f:a5:f0:9d:fc:f1:c9:02:32:
f4:c4:70:38:a4:52:3f:57:2d:4a:b6:41:71:80:8f:
3f:38:a8:0e:36:43:5c:58:39:d5:70:98:51:c9:87:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:79:19:D5:18:DF:4E:E6:F1:E1:DA:BF:0F:22:E8:FF:00:86:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.61.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:2e:bc:35:34:24:29:1a:47:82:66:00:f7:ed:29:b7:5d:41:
20:87:77:8b:56:55:f3:1f:41:0c:44:95:88:51:9a:42:a2:76:
4a:29:d0:a6:61:a5:54:4f:81:a2:46:23:f4:ed:4e:ac:12:dc:
09:c0:13:d8:8e:69:4e:a3:99:98:37:9b:c8:4e:18:f5:ee:70:
7b:91:3c:99:82:fb:b0:42:6d:73:0b:b1:ef:36:1e:a2:10:0c:
c4:b3:c8:8b:d3:75:2d:13:ca:d8:da:ed:db:1a:1d:c1:82:c7:
5d:af:86:ed:0f:90:9a:9c:cd:27:e8:85:42:ee:41:cc:be:aa:
c7:7c:5b:90:b1:00:b0:84:42:f2:25:cc:44:71:a2:55:f6:b6:
6d:fe:4c:bc:bc:b8:ba:33:8a:28:a9:00:ad:04:67:4a:9c:37:
a2:2f:91:0d:97:12:c8:93:bf:3d:43:32:bb:ba:a6:cf:55:1c:
d0:a5:43:d4:c3:8b:5c:c8:07:52:b2:c6:9b:82:87:b1:c0:94:
8d:01:d6:cf:44:70:63:e9:ca:b0:ea:7a:fb:16:02:91:dc:d0:
2b:37:25:1a:4c:50:f6:32:59:c5:a9:e3:e1:0a:21:a1:4b:d2:
b6:25:84:ce:6b:82:7c:93:5d:cf:b9:0d:2a:25:fb:96:ea:47:
8c:c2:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:31 2025 by rpki-client