Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa
File: a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa (raw, json)
Hash identifier: t5NgVIIsYv/92xdxdKLLN1QOoGeA/8/7BABvMRZktYo=
Subject key identifier: 74:76:90:66:B8:07:A8:48:85:FC:4D:46:C8:44:2C:DA:24:79:DC:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF21907B320D3759571480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 98.221.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:21:90:7b:32:0d:37:59:57:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f27f3efa-92d9-4224-bf45-180af92640c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:54:fe:c7:7e:d3:b2:b4:59:2c:af:fa:e2:
05:5e:2e:b5:87:a4:c8:1b:5d:33:e2:88:c8:0c:e4:
16:be:36:ea:f6:bb:6e:d6:f3:5e:d9:9f:56:65:a1:
62:95:15:f1:34:83:64:7a:b2:a0:69:a4:f3:23:fd:
d0:88:44:60:06:80:df:ae:6c:66:2d:f7:31:96:72:
77:12:ac:5a:c6:b3:7c:63:68:97:24:43:7b:15:09:
72:20:73:25:e1:51:d6:f6:af:59:bb:47:e6:68:01:
75:41:da:3b:f3:b2:52:c0:a9:bf:6f:32:fb:63:ea:
8d:74:42:b6:28:78:49:3a:2b:d7:03:34:48:e1:7f:
66:8b:81:76:ce:61:cc:19:cb:27:3b:7f:92:79:89:
44:79:4a:77:f8:32:4b:db:19:f2:cc:69:dc:e3:95:
1d:14:ef:2b:28:06:d8:dd:0a:db:30:74:07:7b:97:
c2:d1:e2:6a:92:c4:60:4e:ba:b0:d6:ca:e2:f6:e5:
f0:e3:0d:af:ef:f7:13:b2:07:d1:c8:b5:c1:3c:b9:
52:4c:e9:df:cf:f7:49:ad:ec:df:d6:ea:55:73:b1:
27:9d:1c:dd:ca:ce:15:30:2e:3c:a8:ba:ca:50:79:
45:e6:94:73:47:8a:e6:39:5c:a9:71:db:ae:b7:a4:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:76:90:66:B8:07:A8:48:85:FC:4D:46:C8:44:2C:DA:24:79:DC:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:46:ae:cf:ab:8f:c9:a2:78:50:0e:7a:73:a6:bc:fa:fd:50:
61:b3:b3:38:6f:b0:39:29:ed:6b:27:3a:93:e9:09:58:a9:ec:
7f:17:97:e4:9d:d7:08:60:82:83:07:69:38:50:f2:71:aa:63:
7a:00:7a:33:20:20:2f:a7:ff:28:8d:3a:67:d0:be:e2:7d:01:
37:4d:29:a0:a5:ca:70:ae:91:08:eb:42:a4:f1:27:42:9d:b2:
6f:c5:c2:eb:c5:0b:f4:62:02:9c:09:9e:ee:48:bc:5a:09:d4:
0d:67:c7:c5:57:78:8d:31:36:bb:7d:3b:8f:5c:52:5f:e4:15:
73:60:9d:54:bb:18:ce:f9:63:19:33:26:06:95:fb:94:fc:4c:
3c:b2:11:a0:b3:12:6d:ee:68:8d:c4:dd:76:2c:2d:3b:2c:17:
a1:03:94:5a:58:11:a7:12:e7:ac:c6:cc:8b:8c:e5:b8:5f:09:
c1:d8:6e:11:86:a6:c3:52:a3:2e:8f:54:bb:2e:bc:ff:57:b3:
17:77:1c:67:cd:9b:58:47:92:8f:c5:5f:fd:29:da:24:cf:2f:
27:7e:1e:f1:24:9e:01:d3:d5:3c:d3:12:5d:34:ac:93:e8:1e:
81:ac:5c:80:cd:13:1e:ec:8b:92:5b:25:bd:88:71:e6:64:35:
1f:36:ff:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:00 2025 by rpki-client