Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b8f97d-a746-308b-83d7-ca1a4e0003fc.roa
File: 69b8f97d-a746-308b-83d7-ca1a4e0003fc.roa (raw, json)
Hash identifier: XUsW3CQih4c8EIsZg7qCvWvcSWLSjSBHhpX6O3a9YIE=
Subject key identifier: 3F:8D:46:D9:01:C7:EA:38:CB:8C:B5:A1:8D:FB:DD:32:B4:79:47:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB02DC78B0D4C9A6DFA1580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b8f97d-a746-308b-83d7-ca1a4e0003fc.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.45.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:2d:c7:8b:0d:4c:9a:6d:fa:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e1cef417-d643-4903-a909-86c25e729441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:c5:09:c2:e0:be:05:aa:63:33:b0:7d:be:
69:f3:d4:85:41:6e:85:3a:84:a7:5a:5f:a5:61:93:
16:4c:6d:5d:8e:9e:99:7e:9c:11:ea:2c:b0:1b:8f:
7e:59:ea:36:fa:d4:db:81:ab:89:dd:db:37:e4:70:
81:5a:e7:99:cc:73:7d:39:c9:fa:d2:a8:15:b7:d2:
25:b3:18:65:4f:90:80:af:7b:29:6e:c0:f5:f0:be:
40:17:1b:0d:cc:84:b5:2b:b6:08:5d:0f:da:7a:fd:
85:1c:0a:93:23:56:96:65:20:af:04:df:e4:20:6b:
19:55:ab:4c:4e:43:d5:b7:e0:99:fe:87:15:d6:97:
70:bb:69:a8:15:c5:87:b0:34:52:1a:e4:06:08:c8:
86:af:ab:9c:75:bf:a0:81:bf:8d:33:ba:ea:da:18:
44:f6:a2:c9:f6:97:fa:25:3d:cb:13:49:8b:74:1c:
5c:b0:8c:39:95:fd:ea:1a:db:74:e1:2c:2d:a1:81:
30:89:67:36:37:ad:47:02:a7:af:a5:82:ac:a2:e4:
9f:ca:9b:57:c6:2b:5b:5b:cf:93:43:5d:27:cf:4e:
c0:ae:6b:da:1c:28:62:63:f7:d5:4f:c4:68:b1:bc:
81:73:98:8d:e6:a7:f4:9f:3d:f0:48:ec:61:bf:3e:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:46:D9:01:C7:EA:38:CB:8C:B5:A1:8D:FB:DD:32:B4:79:47:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b8f97d-a746-308b-83d7-ca1a4e0003fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.45.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:7a:21:6f:d0:5b:0f:d1:3c:62:7a:c9:2a:7d:03:a3:e9:91:
ff:c2:27:f3:e4:71:74:b0:66:d1:05:8a:a6:9e:fe:c6:62:3b:
b6:9d:d3:89:c7:53:8e:b3:bc:25:38:e9:b7:36:51:2e:da:90:
20:90:29:d3:d1:e1:14:7c:1a:65:2a:ec:f8:f2:1d:a3:df:56:
ec:f4:58:a0:52:54:6b:ec:60:a2:1e:3f:98:87:07:91:4c:20:
fc:31:0f:0d:27:66:16:64:94:fe:6b:ac:dc:48:2f:20:ec:14:
18:de:36:03:4a:d0:59:cd:77:b3:20:f0:25:5d:e6:d2:96:b6:
ff:89:00:27:54:59:0d:3a:ac:4b:e0:48:9f:dd:5b:22:af:e1:
71:e7:5e:7b:8c:b1:e0:35:ad:20:b8:2a:50:66:0f:08:75:28:
db:7f:8f:ff:32:9f:23:ef:c5:9a:1e:73:ac:e1:9e:c5:29:b5:
fa:84:e5:0d:11:bc:c0:96:92:38:95:b1:11:88:f3:c7:e6:61:
74:93:d5:c6:ff:23:5c:e4:fe:36:2e:e2:ca:11:b4:43:3b:f7:
9e:e6:2f:37:5f:59:f8:b9:55:85:12:20:2e:74:3a:a6:dd:f4:
16:8a:ec:6a:42:a5:c4:bc:5c:49:c7:29:72:22:03:8e:0e:15:
eb:0a:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:18 2025 by rpki-client