Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f59eb32-baed-3a9a-a1cf-8636af30ee67.roa
File: 7f59eb32-baed-3a9a-a1cf-8636af30ee67.roa (raw, json)
Hash identifier: riz3nNNNNo5FPsNVyE7vYIsSmRbZ1YeJTdvIHeVPN/Q=
Subject key identifier: 77:B7:E2:8B:5C:B1:54:97:EC:9E:2C:D0:B1:A8:A3:25:5B:6E:EC:23
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F96AF0C7EEE692640CDA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f59eb32-baed-3a9a-a1cf-8636af30ee67.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.39.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:6a:f0:c7:ee:e6:92:64:0c:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=cadb679e-381a-4c3d-8526-2f762a266880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:89:be:34:f9:85:ec:18:44:06:e6:05:df:
e7:3c:06:d2:e0:31:d4:84:0d:45:e9:50:18:6b:7e:
9d:eb:a1:32:79:2e:81:17:b2:1d:ed:8e:fe:a2:4d:
e1:d7:e8:2e:f4:53:ad:a3:19:de:e7:4f:6e:c8:09:
99:e5:90:5b:27:e4:32:2d:00:0f:89:09:a3:3a:ff:
ba:5c:72:5f:17:dd:49:e6:cd:39:7c:24:27:aa:b8:
d8:2c:b0:9d:3a:2f:17:58:9d:63:02:19:ec:78:31:
33:04:7e:d9:c3:1e:ad:3c:f2:c6:83:01:55:fb:3b:
8e:0f:47:f8:88:79:5b:42:20:b0:ef:a5:b1:99:25:
36:cc:74:a0:e1:81:67:8b:aa:ff:79:44:15:fd:15:
c2:44:c2:cd:55:46:e5:34:e8:5c:26:42:9c:05:61:
00:87:f0:89:27:8f:95:d2:12:1d:3c:cb:7f:81:77:
f9:1f:ea:e6:87:3c:8f:87:34:65:4b:e6:5f:7b:e4:
01:de:5f:7d:a2:27:ed:32:64:fa:dd:fb:50:be:b7:
97:ef:1e:65:3a:ab:d0:f0:56:cf:2c:37:57:61:50:
3c:19:2a:3b:36:e5:fa:e4:94:4e:c0:ca:37:08:8a:
d4:f7:d1:14:92:cf:db:48:fe:ae:e1:05:d6:dc:0f:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B7:E2:8B:5C:B1:54:97:EC:9E:2C:D0:B1:A8:A3:25:5B:6E:EC:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f59eb32-baed-3a9a-a1cf-8636af30ee67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.39.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d7:45:a6:ad:75:4f:87:a3:11:51:26:96:d0:2a:bf:75:7f:
32:02:63:2a:01:06:cf:89:5b:77:3f:67:9b:10:65:e8:66:c6:
49:87:75:f8:e8:7f:e9:3f:62:ae:c2:55:3a:ee:e8:a2:4c:59:
25:26:3e:f4:a2:45:de:44:64:04:8a:d7:fb:67:df:f2:c0:7d:
ce:56:1d:d4:4b:d3:44:4a:22:1d:6a:3c:e4:6d:28:8e:31:30:
82:02:dc:f2:56:25:2d:1c:67:cb:67:6a:dc:48:b1:4a:30:34:
15:52:d0:c9:76:1a:92:5b:dd:7f:c8:7a:f7:92:2e:fe:15:ee:
d2:6c:e9:5c:4c:09:6a:1d:81:29:57:d4:41:1f:af:e6:ed:ae:
cd:82:aa:21:74:45:0f:d3:f2:25:50:d7:b4:c1:7f:06:94:22:
f2:fb:b1:6f:52:eb:06:ca:06:f2:e8:55:5b:8b:ce:fd:b3:c7:
92:1f:fd:f6:07:e2:43:ef:8f:96:9c:59:d7:cc:09:50:9f:e7:
5a:a7:56:32:65:60:ea:9d:68:e1:c9:f4:ab:ea:82:76:8a:3d:
32:10:1c:9f:b8:2b:d0:f1:c9:29:18:88:4b:72:6d:bd:23:ee:
00:45:40:df:32:89:b7:71:74:58:67:bd:b5:31:e5:1a:94:23:
8a:ba:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:25 2025 by rpki-client