Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f11bdea-48e5-3f21-b1d9-271b3b9d6024.roa
File: 4f11bdea-48e5-3f21-b1d9-271b3b9d6024.roa (raw, json)
Hash identifier: cl754LXoW1tH3zLR1mQOvPOnhZc5lsy2jd6AUHuRGEI=
Subject key identifier: D3:80:92:58:8F:BA:67:87:F4:1E:B5:A8:5D:F8:90:28:9B:A1:2E:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6A3A848201CEC28D9080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f11bdea-48e5-3f21-b1d9-271b3b9d6024.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.62.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:6a:3a:84:82:01:ce:c2:8d:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=67b47e26-820b-4adc-bd7e-94dbb3b141d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:8d:6e:da:4b:8c:72:0d:d2:0a:de:26:c0:
c3:45:01:e0:08:31:3b:08:3e:b1:8c:45:3b:ad:c9:
10:80:dd:63:4c:5f:2b:bb:fd:92:7f:f2:b1:0c:c3:
77:14:73:dd:47:83:70:7d:aa:44:be:b3:82:d8:3d:
b3:38:16:c5:ca:b9:c5:9b:56:ca:9f:c7:d0:0d:59:
43:22:e7:46:6c:8a:e9:9b:9d:f5:56:ee:45:3d:b1:
db:f2:e1:c7:fb:fd:29:ac:05:57:ef:58:95:35:1a:
25:32:6a:b5:43:9f:99:c2:6a:35:f2:12:42:fc:2e:
46:b8:3e:ce:04:c2:ce:bf:f0:8d:d7:1c:e3:45:99:
2d:11:3e:73:d0:09:e7:b1:6d:15:7b:35:72:55:4a:
c1:38:c7:bb:87:49:89:6d:fd:33:9e:d7:68:f3:a4:
b5:e4:72:2a:a9:7a:aa:70:57:b3:cd:7a:ed:75:91:
a6:e9:a0:87:b7:d4:b0:fe:c8:03:28:80:dd:2a:15:
22:62:51:e3:33:a0:4a:a4:94:87:7a:66:51:a6:ba:
13:b3:d5:49:ad:30:36:bc:00:9e:bb:67:36:09:cd:
b1:6d:0c:b6:2f:f0:d9:cc:c8:10:2e:6d:59:e2:63:
3e:0d:3b:63:36:09:74:b8:af:d9:c8:92:f0:ab:19:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:92:58:8F:BA:67:87:F4:1E:B5:A8:5D:F8:90:28:9B:A1:2E:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f11bdea-48e5-3f21-b1d9-271b3b9d6024.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.62.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:58:13:7f:99:e2:df:3e:e6:cc:e8:e8:65:d1:90:95:c7:c5:
89:13:f2:a0:e5:d3:31:fa:b2:30:3a:ba:2e:aa:79:7f:a4:aa:
f9:81:fe:58:3a:9b:96:4b:c4:49:bb:8f:c0:d7:ad:c1:5a:b0:
31:23:4c:a6:c7:95:ac:39:eb:f3:c9:63:8c:e6:5f:14:09:f1:
27:1b:7e:41:fe:72:d6:8d:04:b0:63:e2:1f:29:80:68:41:16:
ec:f3:dd:fe:58:f6:8f:6c:21:cd:64:78:e5:a9:be:38:3e:11:
5c:09:91:f3:37:77:fa:41:5f:a9:27:6d:2b:43:ca:ac:ee:c9:
43:9f:af:6e:ca:0f:28:84:a3:bd:a3:7f:48:15:d1:8c:ff:de:
fe:d3:02:eb:c7:79:78:d2:4e:b2:17:0a:7b:80:92:6b:24:ef:
b8:f9:26:df:1b:6c:ec:71:dc:4b:36:a6:32:8b:43:7d:6a:e8:
d6:8d:8f:3f:df:14:ac:4f:7e:6a:43:cb:e4:41:6b:76:f1:2e:
0f:20:be:18:f6:5a:32:ee:e6:58:44:0a:9b:fe:bd:1e:70:28:
60:90:9d:d5:18:9d:cc:31:78:07:58:db:10:27:38:19:3b:8e:
02:b8:c1:f7:17:52:8f:df:19:33:45:bf:9e:17:65:52:12:60:
4d:78:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:26 2025 by rpki-client