Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f3b537a-e24c-301e-9230-9cd860cfa209.roa
File: 4f3b537a-e24c-301e-9230-9cd860cfa209.roa (raw, json)
Hash identifier: nwfpPOwiYpb2CF8wDSXOQJD4JSdXUtP+uwXZU83RPZ0=
Subject key identifier: 80:F7:EC:3F:D1:51:80:15:FB:F5:0C:D9:CC:4A:AC:29:C3:CB:2C:38
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F96CC41256144D5997BFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f3b537a-e24c-301e-9230-9cd860cfa209.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.40.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:6c:c4:12:56:14:4d:59:97:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=c53b8f7a-0041-4082-8d2c-990d73f9bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:2d:7d:49:95:77:f2:4b:c1:1d:2f:c5:c9:
bc:23:9f:f4:ec:c1:9d:ab:af:da:bc:a5:85:80:17:
da:eb:96:00:6e:41:89:7e:5b:15:5e:26:76:02:67:
0b:27:da:af:6c:32:cd:2f:35:d8:25:47:da:a3:2e:
1d:e0:d5:5d:1b:df:97:8d:5c:ac:d5:54:f0:32:cc:
59:73:53:a8:e7:21:50:15:52:65:90:a3:32:81:13:
a6:a0:fa:29:e0:09:86:fa:0e:e6:43:b1:1b:6c:69:
33:f0:45:63:81:be:41:af:cc:ff:c9:0f:a1:3f:1a:
15:5f:6f:38:68:8f:69:c2:8b:fa:db:c5:ec:fc:66:
bb:51:91:2a:f6:54:87:4d:c8:72:fb:2a:16:c0:09:
84:61:c6:78:b9:f5:15:28:25:0d:28:7b:44:c9:6f:
57:44:7b:27:a8:12:61:8c:d7:57:57:9d:ad:1a:e8:
a9:e8:13:18:50:38:3f:8e:cc:0c:8f:8d:0b:7f:2f:
97:87:e5:fc:a1:ec:bf:67:3d:76:72:47:4e:97:38:
ca:3c:d5:f0:28:e7:d1:d2:24:a6:65:50:61:8d:92:
b1:2f:a0:18:c1:be:09:d3:0a:3d:ef:8c:76:ab:96:
b0:dd:64:3d:a3:c6:23:3f:2c:bc:28:4a:5f:be:fd:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:EC:3F:D1:51:80:15:FB:F5:0C:D9:CC:4A:AC:29:C3:CB:2C:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f3b537a-e24c-301e-9230-9cd860cfa209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.40.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:76:a4:72:92:c2:8c:33:74:58:68:2e:52:4e:c4:d3:d7:b2:
1d:3d:96:fc:24:a3:7a:1e:f3:8b:bf:d7:1a:30:32:59:09:85:
8a:27:c1:06:f3:74:20:17:be:82:06:df:1e:cb:d3:17:b6:25:
04:44:0c:9a:57:6e:e9:99:a0:b1:8d:20:89:3b:d7:10:3f:6d:
fc:54:32:57:22:1d:b5:55:7c:51:e6:b9:62:c1:21:7a:e6:1a:
68:e1:42:03:ec:b8:04:13:3a:ef:9f:a8:11:af:e8:9c:52:ca:
db:fb:63:43:30:df:2c:a8:20:df:32:cb:87:0b:aa:b5:7e:af:
06:de:01:cb:45:29:93:bd:92:6f:16:4d:5e:77:e3:48:8f:c9:
5d:63:25:ce:a9:de:b7:41:04:7b:97:b3:a0:9a:e5:85:bb:42:
52:b3:55:b7:48:b2:d8:06:0d:5e:f3:c3:87:bf:2f:41:af:82:
6e:b8:37:82:03:1b:28:a1:4a:b8:76:61:1c:6c:c6:19:5b:f1:
45:d1:09:f0:78:6c:36:9c:77:02:b1:ef:f8:a2:1a:eb:46:bc:
4a:81:4c:b8:1c:60:d6:fe:d0:d0:c9:c4:c9:7a:7c:5c:53:44:
51:49:2e:2c:8e:ff:d0:1c:f3:7a:fd:6a:99:dc:d8:24:66:c5:
f5:2a:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:09 2025 by rpki-client