Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e5af5f8-fa2d-3d0e-a508-a0008e5d4d2a.roa
File: 2e5af5f8-fa2d-3d0e-a508-a0008e5d4d2a.roa (raw, json)
Hash identifier: sC6v88/3y62Vchj0UDCsxscbaHuygyomxtAkzQfPnq0=
Subject key identifier: EA:0D:4C:F8:63:AF:D2:E1:85:45:5E:F5:A8:1C:61:11:D3:1A:3E:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C1E69671C76B2C91E3480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e5af5f8-fa2d-3d0e-a508-a0008e5d4d2a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 98.251.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:1e:69:67:1c:76:b2:c9:1e:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=f289b516-4429-4f5b-9489-a9260dd8d1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:5f:a8:9c:9d:0c:87:90:f5:71:60:88:49:
d2:8b:42:fa:db:70:49:49:88:60:ec:69:36:6c:93:
9a:e8:a5:a6:6f:7e:00:15:3e:1b:b3:f3:cc:82:23:
83:22:12:d8:95:54:72:98:19:e9:66:ec:f1:44:5b:
aa:1a:a0:45:66:2e:61:21:47:68:d1:b7:7b:bf:7e:
34:88:10:08:93:cf:80:a2:c2:ce:3a:b3:e5:62:39:
55:aa:24:39:99:57:7f:35:a8:fa:f3:5f:b1:47:8d:
20:35:22:ba:3d:e8:c2:8b:23:a2:66:ab:ff:01:f1:
11:8e:fe:de:3d:df:d5:2b:ed:9b:de:35:98:c1:a9:
2f:f6:a9:99:3c:67:35:70:c2:3b:5f:a1:66:57:18:
5d:0b:ab:cb:1e:00:1f:9f:8e:4f:1d:61:3b:68:b4:
d5:11:f0:a8:45:5f:0f:6f:0d:87:49:d5:5f:34:a8:
cd:94:b1:74:98:90:17:f3:6d:5f:f9:47:60:ae:66:
82:ef:75:de:d5:63:12:24:f2:32:f6:13:5e:9b:59:
d2:ad:28:53:e9:5f:01:0e:6f:bc:43:2e:c2:a8:49:
28:e1:fe:4a:38:ac:57:45:42:df:f5:50:2e:bd:ec:
93:ca:90:9f:37:61:e6:bb:e6:43:c9:1f:93:a0:a7:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:4C:F8:63:AF:D2:E1:85:45:5E:F5:A8:1C:61:11:D3:1A:3E:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e5af5f8-fa2d-3d0e-a508-a0008e5d4d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.251.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c7:6f:86:8e:9f:fd:6b:8d:8a:43:01:0d:3b:4b:a5:7b:80:
e4:14:5d:7b:c0:e3:52:2a:26:7c:4c:aa:6b:d7:46:86:2c:40:
29:b1:8c:f7:3c:79:e8:43:f0:90:81:34:f8:f0:55:2e:92:56:
0d:73:18:3b:de:d6:dc:80:7d:4f:29:bc:be:c5:d6:d6:84:cf:
eb:12:c0:10:46:88:03:4f:09:1d:67:51:cf:b2:14:c8:d8:5b:
17:e5:00:05:f9:c9:a2:39:47:b2:27:5b:9a:f9:fe:d0:98:bc:
1d:59:21:74:53:61:84:ab:94:38:96:a4:33:8c:f5:c0:2a:18:
74:50:c6:c2:79:58:29:52:cf:71:7a:3c:f2:d4:1a:2c:a5:62:
d5:dc:bb:3f:e3:ca:1c:58:0c:55:00:07:1e:8c:9d:cb:59:e2:
0a:78:2a:c3:00:3d:6f:c9:51:79:9e:fb:fd:fb:c7:a4:df:e6:
00:20:90:d5:d8:eb:7b:4d:aa:38:a1:92:63:11:61:1d:b3:da:
0e:b8:c7:ac:ba:3c:6b:73:c2:bd:49:54:ff:5d:db:ae:86:b2:
ae:e2:19:4d:ef:2d:0c:95:88:17:ff:d7:de:3f:72:d7:dc:84:
f9:57:3c:e6:ea:83:e6:71:20:7c:2f:f6:2b:78:53:9f:2d:89:
b7:ae:b9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:58 2025 by rpki-client