Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a8e76ba-aa0e-353b-92c2-b812d50898c8.roa
File: 8a8e76ba-aa0e-353b-92c2-b812d50898c8.roa (raw, json)
Hash identifier: 48356uEjt9IeReEGZ6/Lpn+aAoXsygzzRLfwZGWGJ2Q=
Subject key identifier: 99:07:74:D6:86:0F:1E:40:33:70:A3:D9:6A:BA:B7:37:FF:76:43:80
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F9651DFFBA021BE757A8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a8e76ba-aa0e-353b-92c2-b812d50898c8.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.200.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:65:1d:ff:ba:02:1b:e7:57:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=bd8e5f27-c2dc-4da2-819e-9b5797d5d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:85:9e:64:ba:ac:d7:9d:47:e2:65:36:4d:
6a:7b:4c:4c:31:28:8e:d2:ba:7c:f7:f8:90:fd:0a:
52:25:7b:45:88:52:de:98:cd:93:da:0c:4c:41:62:
de:57:8c:b1:df:0d:4f:ab:8e:4f:a2:15:69:e8:ee:
0b:2a:d9:7a:4b:dc:6d:76:85:d3:0e:c4:a4:c9:8c:
f9:5b:7b:e7:38:9b:66:89:5b:b3:d5:45:15:bb:a0:
9c:fb:fe:8d:36:1d:32:53:1d:f9:fb:ef:34:26:a8:
84:f5:e4:e4:e4:d9:dd:f2:75:3a:07:20:92:19:5f:
9a:2f:66:71:d3:4e:70:20:f0:f9:e8:9d:32:81:d3:
79:78:3c:72:d5:5d:df:fc:ed:75:23:93:9c:50:70:
bb:ab:f5:c7:c7:28:66:85:31:0b:0c:3f:63:9f:a5:
38:b1:36:3f:75:be:7e:7b:e3:e8:7f:26:61:62:a9:
36:2b:05:49:ed:86:b5:18:48:6a:39:34:7c:e5:cd:
00:f1:96:24:b4:2b:db:63:38:36:fd:8b:be:a7:c1:
2a:e7:39:c3:4c:78:2d:b3:3d:17:68:21:da:92:2e:
0d:72:7b:9b:dd:c8:08:03:0d:9f:54:45:7a:57:39:
7f:3b:0c:12:a8:2d:f0:6c:ec:60:77:35:ce:6a:96:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:74:D6:86:0F:1E:40:33:70:A3:D9:6A:BA:B7:37:FF:76:43:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a8e76ba-aa0e-353b-92c2-b812d50898c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:80:13:05:d1:7e:6f:c5:09:54:6a:5f:ee:6d:d9:ce:b3:d0:
44:a0:73:96:77:16:6c:64:d0:18:60:91:3b:87:9f:a6:3f:3c:
be:9b:06:83:8e:fe:2d:04:6e:d7:89:ce:62:b7:40:52:ef:c9:
d7:c5:cd:fc:90:3e:fe:64:de:5e:46:0a:e1:6d:8d:2c:2a:eb:
68:4e:14:7d:dc:99:68:8f:b3:4e:71:a4:a3:cf:12:7b:d6:2d:
e4:1a:7d:a6:c7:f5:fa:45:a7:42:9e:5c:96:ff:c5:e0:5b:a3:
58:76:84:ab:91:f5:21:65:ba:a9:e3:29:93:7c:6b:1a:b5:5d:
af:d6:5c:ee:d7:3c:b5:70:a9:75:da:ff:6b:66:7b:8e:8e:07:
7e:07:a7:72:4e:ec:ea:92:ee:65:04:ba:74:2c:e9:be:62:63:
1e:36:ae:c7:ca:6a:a4:3e:c9:06:cd:f9:c0:c1:93:f6:aa:73:
f2:29:cc:03:3e:54:72:f3:c4:91:39:d1:a9:ed:f5:cf:a8:ce:
72:90:ed:61:23:85:d3:ad:e3:d6:42:d6:b5:62:78:38:cf:a6:
2d:31:0d:80:dc:a1:86:3f:46:32:77:df:9b:89:88:b8:d6:41:
32:41:f1:ce:58:7f:28:72:7b:41:69:ee:a4:2f:86:3d:64:69:
39:e7:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:36 2025 by rpki-client