Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0349b4c-1f5f-3f08-92d0-7437ff8492ab.roa
File: a0349b4c-1f5f-3f08-92d0-7437ff8492ab.roa (raw, json)
Hash identifier: OiuI3m/VFx+lXMdMK+OBA+B2mBDM+IcUUR0bk3maoeA=
Subject key identifier: D3:60:23:75:28:3D:40:DD:61:27:82:FA:33:92:24:FC:B5:A6:2D:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB15FF4D7F1651272DE2AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0349b4c-1f5f-3f08-92d0-7437ff8492ab.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.253.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:5f:f4:d7:f1:65:12:72:de:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0d396444-07ce-4faf-97f9-e2158d4f91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:be:c5:e9:91:50:03:16:a2:56:c4:73:80:
77:7f:83:5e:c5:31:1a:cd:56:92:5f:fd:e7:89:50:
5a:1b:56:71:ed:4a:d1:f3:56:52:fe:48:3f:a2:f0:
54:1e:58:cb:c1:e3:c3:67:82:c7:6d:a5:bc:98:13:
44:32:0a:9c:77:cc:f8:33:40:7c:a5:13:bc:94:34:
26:52:1d:a4:a1:40:87:ec:d2:6e:4f:27:5a:fc:a9:
d6:44:b9:3b:9f:a4:5a:31:63:c0:36:bf:dd:e9:20:
11:ba:d7:93:45:23:e0:53:e6:3b:aa:3c:62:3e:9b:
dd:31:dc:6e:65:ce:73:99:0f:f7:fe:81:2d:b7:5e:
91:34:15:2d:fa:ed:a4:16:7c:6a:f1:4f:ac:bd:8e:
93:36:96:a1:16:42:9b:98:29:b3:6e:ba:24:12:01:
f9:52:2b:c9:72:8a:04:69:fc:2a:69:65:f1:20:d0:
86:9c:79:1f:4a:39:79:13:5b:97:c4:d2:8e:57:9e:
66:89:d3:e3:6e:01:a8:c7:dc:9b:0e:55:dc:77:6e:
55:bc:f4:31:6d:50:5a:54:3b:82:ff:90:4d:3b:be:
99:f2:c3:37:59:44:56:0b:06:c2:a9:7a:62:1d:f1:
ec:9f:35:bf:3d:7e:6d:2c:f9:de:66:2b:0c:e0:87:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:60:23:75:28:3D:40:DD:61:27:82:FA:33:92:24:FC:B5:A6:2D:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0349b4c-1f5f-3f08-92d0-7437ff8492ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.253.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:99:89:4e:10:41:94:3d:d5:e0:c3:e1:d2:06:6d:db:de:9e:
e9:70:81:8c:89:7c:ba:81:49:c7:f6:77:56:a4:f2:98:d6:3b:
43:b9:41:e8:ec:e8:de:52:42:77:96:eb:1c:f7:e6:4c:33:4f:
eb:de:f2:0a:87:b4:91:b6:75:9f:6b:fa:0e:da:5a:ed:52:5e:
d8:e8:be:6a:e1:a3:d1:72:38:52:3a:06:94:71:de:96:ef:c6:
03:bf:62:b0:8d:f4:3a:fa:a5:ff:ce:e7:ce:c1:75:45:6f:15:
e5:59:34:9b:5b:cf:78:4b:ff:ac:c6:a9:d2:b7:c4:5f:81:d1:
90:43:7c:e6:20:be:15:7a:1a:c7:5c:75:68:f0:e7:32:96:c5:
7f:97:88:4c:e0:73:1a:bf:93:6e:d5:ad:f1:a7:53:7d:47:e7:
96:4f:e6:50:1f:1e:0d:67:f5:6c:80:ca:52:a8:f9:af:de:78:
52:9c:70:73:b1:90:78:26:56:c8:d9:78:aa:ca:04:b1:4d:46:
25:8a:58:3f:a9:80:56:a8:17:99:53:71:55:97:7f:3b:c0:35:
03:98:a4:60:f2:08:69:ec:58:e5:e9:48:63:a9:ef:b4:a6:9f:
5f:9b:24:65:93:02:44:e4:3e:d9:c4:df:11:e7:7a:a4:8f:7f:
4c:a2:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:33 2025 by rpki-client