Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3969a28f-02fb-3828-bfb5-0a54010e3049.roa
File: 3969a28f-02fb-3828-bfb5-0a54010e3049.roa (raw, json)
Hash identifier: 5ix4Qnl2MMkpvwEQS7ZtxLktOp7VVlTHZhtbkfIqbss=
Subject key identifier: 45:49:21:01:CA:02:9D:38:F3:B3:F2:89:47:D0:80:D1:77:2D:03:DB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB03116545234DEB051C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3969a28f-02fb-3828-bfb5-0a54010e3049.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.51.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:31:16:54:52:34:de:b0:51:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cbc6bffd-d309-456a-ad55-53f512926153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:7e:b8:09:01:0c:3c:4e:90:a1:1b:58:b3:
ba:a2:68:11:c6:57:a6:0a:04:d7:07:d2:02:dc:96:
bb:d6:1f:82:14:1e:b2:50:ab:5b:f4:a5:27:5d:39:
87:7b:75:09:69:82:50:0d:f3:a0:8b:17:2c:77:8d:
2f:7f:b4:0e:8b:19:9a:c6:49:af:f2:03:8d:23:17:
af:9e:41:37:be:bb:16:8b:4d:c2:4a:c8:a9:94:a3:
56:a5:f7:b2:fb:5c:30:a0:35:19:e4:66:ad:4a:b4:
f6:eb:e8:a6:26:5b:03:f1:03:74:a2:15:5e:80:2f:
48:3b:f5:7a:e6:98:77:ad:5f:a0:ac:15:cd:96:0d:
ad:66:a7:0b:2d:c2:46:f6:b4:5a:88:5d:41:c6:2e:
70:41:98:80:66:90:c4:46:e7:81:36:c0:71:c3:3c:
b0:9c:00:bc:6e:58:d0:48:38:65:9e:6a:2a:17:93:
a8:e9:4c:40:da:f8:9f:98:d6:2a:38:48:23:6a:ad:
a3:16:a1:9f:66:86:83:35:cd:17:ec:88:df:37:94:
8a:8b:04:3d:86:53:e3:df:a9:30:e6:56:1a:02:93:
87:28:95:b2:a4:85:64:ce:0b:04:51:0a:6a:c2:76:
1d:1e:09:e1:93:cb:a9:d4:f8:18:e8:55:73:7a:5b:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:21:01:CA:02:9D:38:F3:B3:F2:89:47:D0:80:D1:77:2D:03:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3969a28f-02fb-3828-bfb5-0a54010e3049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.51.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:5f:34:fc:dd:39:ee:71:5d:86:ca:db:dd:55:bc:7d:85:62:
ca:09:0d:d3:32:b9:13:68:db:28:90:ed:98:6e:5d:ec:48:6b:
fc:8d:cc:54:2a:10:17:be:88:ca:18:32:32:c3:55:89:2e:18:
59:a5:03:ca:46:b0:fd:50:66:c6:6d:b9:d9:9f:19:da:83:6a:
ba:f8:16:15:15:2c:32:34:8e:71:48:5e:35:79:8a:36:f5:d4:
95:33:37:78:aa:8e:ba:8c:da:f6:b6:8e:00:6c:dd:c7:80:67:
17:83:5a:7a:10:38:9e:05:a6:cd:14:68:3e:c8:06:f3:37:5a:
de:79:9d:38:f4:0f:14:b4:6d:12:bf:ef:35:0b:53:f8:e5:49:
fd:1c:04:fd:59:07:a9:2a:fc:8c:a7:b6:7b:8c:7a:f4:de:ec:
0c:8f:f7:6f:2e:0e:c4:49:67:23:8c:1a:5f:9f:e9:5b:f0:88:
15:c4:c0:83:e4:60:af:76:e0:6f:9a:cb:d2:6c:a3:79:59:66:
99:9d:74:aa:c7:c7:cb:c6:d8:3e:e2:1b:8d:5c:61:7c:62:0c:
b4:d2:04:a4:dd:21:40:c4:ed:87:2d:cf:48:83:d6:90:9a:98:
17:f9:8b:c1:f4:e6:a8:d5:7b:f2:7f:20:32:f3:35:52:7d:36:
bf:2f:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:26 2025 by rpki-client