Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa
File: 4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa (raw, json)
Hash identifier: oNGOXeX6iAhkCN8NDF9jz2RnF3nIY+RNptvlEpr/m6Y=
Subject key identifier: 59:9A:FE:D4:E4:07:BB:C4:84:86:02:AB:FF:66:61:BC:31:22:60:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1CFABF2D8F39A8421F600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.207.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:cf:ab:f2:d8:f3:9a:84:21:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=09efa1c3-ec3f-4111-b8dc-c1dbaffb995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:59:45:b9:b9:d7:2b:58:13:45:e4:b1:ae:
34:bd:34:05:9d:00:bd:38:eb:db:fc:5e:03:d5:7f:
44:3e:cb:a5:85:14:bb:ad:89:97:73:55:2b:6b:c3:
f9:39:ba:83:74:eb:08:2d:e1:70:9c:b9:d3:c3:42:
fd:99:85:ce:2c:3a:4b:a9:57:b3:3b:76:3d:de:56:
69:64:60:0b:56:57:ec:b7:10:4a:4c:fd:f5:5e:dc:
a0:06:45:95:72:f8:5d:9f:56:52:a5:bb:c8:43:fc:
4e:6a:89:f5:12:46:1c:a9:7c:2d:d5:da:c3:61:cd:
e7:64:c1:9b:46:15:fe:bd:9e:65:5c:c7:00:61:d2:
e9:e2:74:fb:8c:ea:3c:e1:07:84:64:47:bb:95:65:
44:09:40:d3:a6:d5:d9:01:ef:79:d6:39:6e:70:82:
05:8b:e8:9b:97:89:ed:d8:24:d0:92:e7:66:bc:f0:
17:ca:70:50:8a:b6:6f:da:45:a5:45:54:c5:50:97:
55:12:76:5d:77:52:49:33:62:d0:1b:33:67:de:de:
b2:3c:26:69:9b:b9:3a:c6:f9:b5:d5:96:99:c1:54:
a3:50:4c:9f:74:93:81:f2:d0:97:ed:31:4d:3f:34:
24:08:a2:ab:6a:41:e7:59:48:01:a5:0e:a4:02:32:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:FE:D4:E4:07:BB:C4:84:86:02:AB:FF:66:61:BC:31:22:60:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.207.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:7e:be:c3:c3:cb:8f:44:f7:73:d6:35:a1:b8:aa:53:81:ea:
d4:87:85:42:35:67:74:47:75:56:09:89:53:0b:a4:3c:a6:7f:
69:69:70:15:3b:9e:fa:00:26:35:24:80:f9:93:eb:82:c6:de:
0b:64:64:57:0a:93:5c:74:c4:f2:41:17:6b:b9:2d:a7:90:0d:
01:04:d4:d2:d6:cf:91:35:12:9a:5d:55:0a:86:78:b3:32:bb:
75:8c:3a:f5:e9:1e:63:96:27:73:98:16:4f:08:29:6f:69:9e:
56:19:2d:01:ff:ff:e0:c9:da:18:34:ed:78:56:07:e0:6e:f1:
78:a6:87:eb:b3:8b:cc:47:1e:58:e5:11:01:5b:8e:0b:40:f3:
1b:b0:54:57:15:93:9e:7c:a5:1a:9a:7d:5c:1c:e8:b6:e8:f6:
82:4f:90:10:6a:ea:3b:c6:e8:84:73:24:e8:ce:eb:bf:ad:d9:
75:ae:0e:54:b2:21:c5:37:35:46:51:9c:d1:56:c7:cc:cb:4b:
cf:c0:35:c6:31:39:b7:04:21:c1:e1:23:be:78:b8:dd:69:23:
fb:ab:b8:4b:94:8c:42:58:e7:2e:33:65:82:15:b9:b5:49:25:
a0:c3:e0:f1:4b:59:a0:53:e1:6e:35:34:eb:2b:9e:b6:91:8d:
ab:1b:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:24 2025 by rpki-client