Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aa3ad08-f9b4-3cd6-9d46-9f3ac7fb8592.roa
File: 4aa3ad08-f9b4-3cd6-9d46-9f3ac7fb8592.roa (raw, json)
Hash identifier: jsSwUV50eTp1n+4oAaweeNMd1iXNceLnNCKDl3ZVrLg=
Subject key identifier: 43:1C:D6:B4:D3:9F:3E:ED:CC:53:1A:E8:22:11:DA:35:D4:6B:CE:25
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB02A6A2220987999D1C520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aa3ad08-f9b4-3cd6-9d46-9f3ac7fb8592.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.37.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:2a:6a:22:20:98:79:99:d1:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=58d590e1-dff7-4934-9e58-e4e6acdd5813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:19:3a:b5:7f:71:a3:f7:89:ec:2e:dd:91:
00:71:18:41:ea:bc:0d:06:5e:39:7c:99:1d:07:fa:
a4:e9:37:a1:4a:8b:82:20:2b:9a:34:c6:4f:cb:56:
d6:f7:f6:88:c4:a7:e5:31:30:4c:88:ee:8b:9c:8e:
83:2e:df:ff:e9:69:df:9e:e0:ae:76:35:58:71:46:
a2:81:07:d6:e8:a4:58:6b:66:a3:5a:0f:cc:63:42:
ef:4b:05:0a:1c:20:5e:5a:cc:fb:53:13:00:f7:82:
93:72:bb:9c:f8:82:a6:99:4a:36:23:22:22:d3:6e:
e4:31:08:a8:20:1d:03:bb:2b:ef:be:f5:91:f5:6c:
9c:d0:11:f5:81:26:4d:68:9f:af:03:97:eb:62:18:
3f:95:62:0b:fd:83:9d:bb:5e:2f:9a:7c:6b:1e:cf:
1a:95:cb:7f:7f:86:aa:29:f5:2a:c9:0d:5a:9f:4d:
fd:e3:fe:67:1b:0d:b5:d2:6a:34:aa:fc:52:6a:b1:
6f:c3:4c:72:d5:03:42:de:2d:df:88:9a:81:c9:8c:
fa:29:2c:92:9e:58:d9:53:e1:03:c5:be:7f:63:9e:
6e:51:97:c3:1e:85:f3:e5:ef:f0:33:8e:56:d6:13:
07:e2:a5:f1:28:3a:81:01:e3:1d:21:01:5a:03:5e:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:D6:B4:D3:9F:3E:ED:CC:53:1A:E8:22:11:DA:35:D4:6B:CE:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aa3ad08-f9b4-3cd6-9d46-9f3ac7fb8592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.37.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9b:70:fd:7a:65:85:b1:e1:6a:b3:56:07:fc:a0:b9:0f:b9:
3e:e1:05:9f:46:6e:70:3b:56:04:47:46:91:9c:8c:97:81:ce:
62:57:17:66:0f:61:ad:20:30:ea:7d:5a:fa:f9:ac:c9:64:d1:
77:16:42:5f:4a:e3:47:d2:97:2f:92:5c:ca:d3:70:c7:ed:42:
8d:03:7b:e1:bb:81:6a:56:8c:19:71:4a:08:a5:49:80:47:1a:
e6:65:48:00:62:d3:9c:da:58:38:6a:cd:75:8c:a1:f4:84:23:
27:de:67:83:9b:6a:97:d9:b9:f7:ee:7e:26:e4:7e:5e:7a:7a:
12:bf:fb:43:cf:78:7d:a8:a8:be:0d:a6:14:de:92:0a:3e:50:
e8:01:d9:31:e4:a2:a0:6b:2a:de:f1:59:27:f7:27:b0:c6:14:
3a:cf:54:8f:a0:76:3b:b8:27:55:ad:19:9f:61:97:a0:9e:8e:
2e:17:b1:5e:45:e4:88:31:6f:79:fb:62:b0:e7:5c:b5:0f:35:
e7:91:70:b6:d7:d6:33:44:e1:66:aa:30:4f:d7:3b:25:97:eb:
f1:e0:5e:25:dd:5e:93:71:c9:cb:46:45:e3:05:d5:8f:8b:78:
22:83:46:d2:c1:e8:b9:80:a3:ed:68:1c:5e:13:c2:4d:5c:7d:
68:5f:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:08 2025 by rpki-client