Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aeeccf0-28ad-3fae-8909-8dd79dc487a4.roa
File: 5aeeccf0-28ad-3fae-8909-8dd79dc487a4.roa (raw, json)
Hash identifier: 2jyHIg+a6tqHxRSxXGZCNR9koJwgfCOs6pUw1qxg55c=
Subject key identifier: 2B:A7:7E:87:2D:2C:12:C1:57:B5:17:BE:71:46:1C:AA:D1:CE:3E:21
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F80A566D940161341E6400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aeeccf0-28ad-3fae-8909-8dd79dc487a4.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.197.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:0a:56:6d:94:01:61:34:1e:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=bbfc5a80-26d4-4553-9cae-1263c2ff5c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:11:da:38:d5:f9:ea:92:48:97:28:7b:7c:
32:7f:52:90:bb:40:a5:55:45:dd:54:ef:dc:02:eb:
29:c2:33:00:1d:43:18:e5:57:bc:b3:0a:be:2d:69:
30:d6:9d:e5:e3:00:96:52:b0:9f:f2:77:61:4f:5a:
c0:c8:25:92:cb:4b:d6:fb:7b:7a:24:67:c5:7c:ac:
0a:86:83:fc:20:96:d0:2e:fe:4e:d3:f4:1b:02:28:
f3:d8:1f:7f:fc:44:36:07:8e:a1:f1:27:45:37:d9:
ed:77:2b:a4:61:24:2e:15:66:be:32:b2:cc:2f:73:
d0:7e:45:7b:85:1c:2d:24:dc:9d:95:06:22:da:61:
d6:8e:1b:8d:09:6f:7e:31:bd:bc:81:9e:98:47:72:
de:26:73:a4:0e:93:2e:dd:b4:dd:55:f8:61:f7:26:
70:64:00:22:cb:d3:21:4f:f9:75:45:e9:15:c0:f7:
ba:95:3d:68:1c:80:87:b2:d0:b2:1f:62:0a:bd:f3:
e6:e0:01:c1:7e:33:23:1c:42:94:b9:0e:98:43:ce:
99:45:12:93:f9:ec:e6:88:8f:a5:32:f9:a5:c0:cb:
fb:4d:34:f1:08:1c:b8:83:9a:1d:c7:de:a2:d8:6b:
58:d4:73:c2:da:2c:de:96:20:fb:44:c4:d0:46:a8:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:7E:87:2D:2C:12:C1:57:B5:17:BE:71:46:1C:AA:D1:CE:3E:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aeeccf0-28ad-3fae-8909-8dd79dc487a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.197.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:27:e9:da:68:22:e0:e9:00:7c:ed:b4:f9:45:e2:49:de:a2:
64:b2:65:01:c5:a1:60:b4:cb:9d:10:d9:3c:5a:dd:ce:a7:a7:
cf:74:ff:70:8a:23:f8:30:1b:f1:43:5b:d1:1a:5a:7d:03:d4:
09:25:b0:12:33:b6:d6:98:54:5d:9a:b7:e5:5d:41:f3:bb:fd:
17:5e:a7:8c:89:a7:bb:2f:fd:bd:c8:88:3c:55:47:58:1c:56:
77:01:40:7e:61:d8:ce:17:c9:fa:c2:70:fe:dd:fc:32:8e:fe:
b8:c7:f2:e3:9b:16:37:09:b6:68:47:6c:5c:fb:50:27:d7:69:
2e:68:1c:4a:54:7c:1f:f0:09:b6:61:18:d8:a2:5e:01:b3:83:
74:52:db:86:d5:cd:7e:82:2e:02:30:e8:1a:53:93:78:95:ba:
2a:3c:b1:07:18:fd:22:3d:26:f3:72:ee:13:33:06:61:ae:6c:
49:27:f7:b2:af:a6:15:bd:d0:28:11:59:4a:86:c7:1a:91:ec:
7c:a9:72:75:bf:87:65:df:4e:fe:e2:5e:1d:d5:98:7e:6f:ed:
f6:bb:b5:20:ea:c4:3b:b2:71:54:20:99:18:69:44:44:65:74:
f4:7c:38:d7:0c:2b:a4:09:ca:aa:65:71:3c:d4:6a:71:b5:0b:
dd:7b:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:49:51 2025 by rpki-client