Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c70b55-0bbf-32fd-b15f-41885eca1e88.roa
File: 65c70b55-0bbf-32fd-b15f-41885eca1e88.roa (raw, json)
Hash identifier: clNcnF/R5v111/8V283oT4tqJtCedCqLAWU0ZEHk6d4=
Subject key identifier: 09:0C:3C:FB:76:DD:32:E9:88:85:2F:CA:DE:BC:35:66:86:3B:F3:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB15A1625EABC7259ED6BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c70b55-0bbf-32fd-b15f-41885eca1e88.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.223.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:5a:16:25:ea:bc:72:59:ed:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e794aba4-c8ad-4d39-8b39-cb5d496cb121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:33:62:3c:46:8c:12:ae:2b:55:05:74:37:
cd:43:3c:8a:5a:54:ed:e5:0d:62:8c:f0:e8:88:6e:
52:9e:53:24:1f:13:83:79:7a:d4:df:a3:79:49:91:
a7:00:ee:bc:5a:b2:80:c3:33:d3:2f:61:b0:68:7a:
04:b8:18:83:53:2d:34:b1:a3:47:5d:7c:5d:05:7d:
ad:8c:6e:fc:2e:b9:6b:f5:24:ff:c2:45:f2:a5:a9:
7e:04:a7:67:34:ff:3a:85:ee:f9:f9:17:76:e7:6f:
b0:f8:82:d4:2f:33:6b:d5:5f:e0:3b:ce:99:e7:e1:
f5:c2:55:d0:35:46:7a:02:f5:a1:9a:4d:94:4b:96:
9b:87:3c:47:fd:88:66:51:29:25:80:d8:b4:56:a6:
21:68:cc:e8:68:48:26:80:29:bf:f9:7c:a1:e6:4c:
29:92:35:66:a1:3f:ec:1d:d8:d9:03:f1:29:98:59:
64:9f:76:a0:2e:0d:14:48:a4:bf:94:29:4a:b7:ef:
b1:f7:90:ba:4f:97:5b:30:4e:ac:dd:b9:74:a7:d0:
40:ce:7e:ed:0c:bc:18:6a:bb:6d:3d:a8:e0:12:b7:
4e:d8:2e:49:39:b6:32:9c:e3:49:82:16:cd:3a:6e:
67:c7:13:34:07:1b:c2:47:e9:c1:22:93:9b:d4:46:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:3C:FB:76:DD:32:E9:88:85:2F:CA:DE:BC:35:66:86:3B:F3:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c70b55-0bbf-32fd-b15f-41885eca1e88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:a5:f8:92:63:d4:a9:18:1c:21:5c:0d:71:a0:67:59:0f:cb:
00:95:85:f1:1e:d3:b2:16:8f:b0:c7:a9:2b:01:c4:71:8f:77:
92:bc:ef:4d:7a:44:60:7a:9f:00:d6:fb:83:42:b3:1b:e6:c6:
9b:4d:3c:81:22:5e:e6:51:1f:77:15:db:f1:ac:49:ee:54:8e:
c0:80:19:cb:3d:ce:3d:54:bf:e1:ea:0e:e4:da:49:bd:dc:e7:
35:71:c2:e1:1c:f1:f0:5a:6b:2d:fe:17:43:66:a7:61:5a:1f:
dd:4b:a8:80:91:f8:d6:3f:76:11:27:f1:af:a7:99:25:33:36:
7b:3a:8e:fb:f6:47:a3:e8:25:d5:f1:d1:63:51:ff:f5:04:8f:
75:ee:e5:19:0c:f8:eb:4d:1b:8a:5d:61:e0:56:17:dd:15:d9:
e7:2c:e8:9d:61:1e:a2:72:7a:c6:ff:fb:33:c4:31:15:52:2e:
e6:a6:cd:14:07:bd:66:b5:3a:31:a7:d5:a5:b1:8f:ec:57:a3:
3e:d2:a2:87:60:25:f9:a0:22:be:68:0e:f4:17:1d:e4:4e:b5:
70:20:68:85:c7:94:22:fd:ac:a2:17:d5:b0:7e:a3:b9:8d:b7:
00:51:cf:88:2c:92:6e:f0:77:fb:25:6b:8b:e8:28:71:4d:2e:
c4:5a:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:01 2025 by rpki-client