Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98dc8a22-7120-3652-81e6-bde0a07c0634.roa
File: 98dc8a22-7120-3652-81e6-bde0a07c0634.roa (raw, json)
Hash identifier: hO6G0aaWHobp48unjBe8TBFcyypB058P69RecquKVJ8=
Subject key identifier: 7F:48:D5:74:98:6F:56:C8:9B:39:20:A9:FE:CD:69:92:09:87:54:B9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DD3B4AF3A5E6B3344FB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98dc8a22-7120-3652-81e6-bde0a07c0634.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 98.61.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:d3:b4:af:3a:5e:6b:33:44:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7db70ec1-f393-4ccf-bbf3-5d18b8ed409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:2a:d3:4c:b8:02:e8:1f:f0:3b:65:0f:f7:
1e:be:c0:c2:cc:52:59:d7:d3:09:78:53:0f:7e:e7:
bf:35:ee:7a:24:e1:b4:eb:67:f8:d5:69:4d:95:7b:
86:f2:a1:4d:04:9f:59:43:d0:9f:96:1b:80:61:b5:
43:2a:25:8f:37:67:5f:19:4a:27:70:40:aa:73:f8:
20:72:99:5b:ce:63:dc:93:f5:28:a4:e8:e7:71:19:
c8:2f:4c:2e:c6:13:62:78:8d:b3:bd:19:26:03:b7:
24:44:a1:56:d0:f2:4e:61:ce:c0:f1:ef:f6:51:7f:
47:ed:4c:99:97:29:c4:dc:f6:35:a7:ee:d2:a9:d1:
be:f3:d8:2a:b0:5d:12:62:3e:02:dd:5b:02:93:d2:
de:f1:92:97:21:6b:b0:a4:07:ff:42:e6:d4:42:77:
61:99:4b:76:44:cc:bf:7f:2b:7b:fb:00:f1:3f:2b:
a3:b2:5e:98:fb:3f:28:f1:24:1c:98:e6:b8:06:50:
18:09:b0:9c:2e:68:c7:6b:bc:17:4a:24:46:f9:c6:
2f:20:fa:56:1e:8a:ec:ba:d3:ea:50:18:cf:14:27:
84:1d:7a:6c:7f:74:2c:f2:1c:d1:58:6c:ad:f2:78:
14:6b:7b:44:f8:b8:38:3d:f7:17:22:dd:f1:cc:16:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:D5:74:98:6F:56:C8:9B:39:20:A9:FE:CD:69:92:09:87:54:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98dc8a22-7120-3652-81e6-bde0a07c0634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.61.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:e6:93:71:f7:69:94:33:fd:c6:23:84:0d:3d:8a:32:e2:cd:
38:11:e4:cf:5d:c7:24:73:81:65:d9:3a:7c:5e:2b:68:3e:da:
e1:f2:69:34:1e:54:9b:7e:59:f4:ca:87:26:3a:19:c7:72:b5:
37:2c:b6:44:f3:a8:c6:ae:48:60:62:96:83:27:46:0d:07:ff:
20:0b:68:1a:77:fb:6f:12:f2:84:38:5a:6d:15:3a:f1:54:0c:
22:4b:e4:64:a1:bf:25:b5:d8:84:9f:f2:88:2d:12:52:9b:e9:
96:6f:24:6d:43:5e:8d:26:58:cd:15:b6:71:42:5d:31:6f:d2:
d0:f2:4a:62:50:51:b2:a3:56:9c:85:ee:1f:e2:84:ed:49:12:
be:4b:58:95:5a:95:e4:84:9e:1c:83:80:98:60:a2:85:41:ef:
f7:b0:1e:9b:e0:96:6f:56:0a:f3:04:a8:a9:5f:85:7c:a6:1f:
43:db:c6:7b:72:1c:81:11:bd:9e:f5:28:e0:ab:e9:06:58:0b:
d6:85:db:6e:8f:d7:62:90:72:05:3c:8c:22:bc:bf:1b:09:6a:
3e:25:40:7f:4c:35:ed:04:3b:12:73:df:08:52:21:16:50:d6:
17:e6:c9:28:6f:33:2a:46:04:28:92:f3:7a:ac:13:a9:91:87:
3b:25:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:33:48 2025 by rpki-client