Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/554c7984-0b60-3758-b2cc-35120235d15c.roa
File: 554c7984-0b60-3758-b2cc-35120235d15c.roa (raw, json)
Hash identifier: my4pl+1KjL1rS5EFagNhThcbl9G4+gpgS0JW9MmeDRA=
Subject key identifier: 02:BB:D0:90:43:36:8C:A5:C7:37:F0:EA:E1:11:88:88:06:C2:F7:3F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF2C85BCCC6D054BF92D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/554c7984-0b60-3758-b2cc-35120235d15c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 98.221.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f2:c8:5b:cc:c6:d0:54:bf:92:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=c689cd45-d723-4bdc-8480-9ee8f77464a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:8a:a9:af:8f:cc:d4:40:4b:5a:c5:8c:ce:
4d:78:4b:28:55:79:16:c9:14:99:9b:43:2d:82:10:
c7:3c:f5:f2:23:a5:0f:0f:da:d0:85:c4:dd:a9:5e:
24:13:a5:71:bb:62:14:5b:f0:43:84:6f:f7:87:21:
bc:c8:b2:97:7e:83:02:28:be:2c:2b:99:b6:0f:d6:
e4:f3:a0:99:0b:a2:5e:30:32:1f:73:ff:4b:54:97:
e9:b8:44:95:0d:be:30:ee:c3:cf:06:7d:6d:f7:3f:
c7:0a:da:d6:5b:fe:ba:25:c4:df:95:d0:86:fa:93:
39:6c:7b:03:dd:2c:7d:a8:06:92:90:39:69:53:45:
85:16:b9:49:60:a2:7b:bc:a0:f9:b8:b0:a4:56:ec:
6d:fe:21:92:26:70:61:0b:4d:b3:3e:8b:93:27:3c:
74:3f:2d:ba:dc:fb:92:f3:d2:2d:0d:b6:b0:89:3c:
24:3d:9b:dd:c2:4f:51:40:14:69:66:c8:80:61:bb:
81:31:f4:59:fb:84:87:3d:e8:0a:f4:42:81:24:d8:
bf:64:f1:60:35:84:c0:4c:31:53:8e:b6:0c:1e:dc:
a7:2f:86:29:f1:33:1b:d9:75:03:d8:2c:b0:5d:f6:
7e:0d:17:23:79:21:41:51:9d:b3:4e:2d:4a:c7:ce:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:D0:90:43:36:8C:A5:C7:37:F0:EA:E1:11:88:88:06:C2:F7:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/554c7984-0b60-3758-b2cc-35120235d15c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:6e:bc:17:94:a9:fb:47:ed:cc:e7:9e:30:c3:d5:55:e4:dc:
e0:45:90:5b:6c:de:1c:66:1c:9b:c3:25:c6:67:a3:87:3b:23:
f0:d2:e3:c9:d2:4f:ea:9f:03:1a:3b:48:e8:38:8e:a4:b5:b7:
e1:36:ed:bc:1d:f6:3b:19:42:63:4d:ef:2b:d0:c5:58:38:c2:
98:83:71:e2:9c:9b:74:14:f3:08:6f:58:bc:60:d4:23:6f:93:
f5:ef:6a:f2:d2:48:a2:97:b8:ae:28:67:6b:96:30:62:d5:af:
b9:ff:02:f3:5e:6b:39:25:17:5e:4b:90:6b:40:c1:5e:6e:e3:
13:5e:d0:3d:89:76:bc:c0:31:2f:ec:82:34:2e:ff:00:76:de:
0c:7c:3b:7e:41:ba:cf:31:61:cb:37:6e:17:44:b7:29:dc:ce:
2a:6f:09:83:56:16:43:1b:94:b9:ea:d5:06:72:33:29:22:4f:
77:6e:d6:68:16:fd:97:78:4c:42:d8:7d:56:af:49:5a:08:ec:
34:cb:d6:7e:fd:b2:7e:d5:3e:77:67:02:0b:8d:bb:8c:38:fe:
51:3f:67:60:bd:de:7b:04:f6:a8:03:0b:e6:5f:e9:2a:6d:b3:
c6:4c:bb:e0:a1:a6:5f:8d:c5:33:2d:7a:c0:0b:04:15:05:e4:
af:9f:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:32 2025 by rpki-client