Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa
File: a3112e5e-c049-3664-bd63-a89430e5c577.roa (raw, json)
Hash identifier: YUu1LGKgK9o1POWkBoHztRRHm6/CBUBYKy6jxlE5Ebw=
Subject key identifier: F5:1B:8D:CA:2F:24:1A:22:49:27:49:6C:72:87:F9:13:EE:0C:C1:0C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0B0B4907EFE39A9E83200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 98.221.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:b0:b4:90:7e:fe:39:a9:e8:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=37e626e4-1226-4262-a62f-7ab471952b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:2e:86:8e:09:02:e1:95:85:a7:02:fb:61:
ea:4c:d0:22:e4:72:f0:30:5e:a6:1c:d3:c9:46:06:
14:50:9a:c8:8b:d5:3a:03:61:6b:5d:06:c9:5b:20:
65:59:bc:6e:e1:aa:fb:a3:6a:93:02:33:91:bf:dc:
cd:03:47:23:b3:eb:48:e5:f3:28:c7:b1:97:79:ae:
b7:a4:00:b3:90:d0:46:59:b5:a9:c7:19:a2:ae:04:
d7:cd:36:cc:87:de:6e:5f:a7:4d:6e:ce:e2:a4:15:
a6:ee:da:e6:1d:73:2a:fa:76:cd:e4:18:d7:eb:3e:
8b:35:bf:46:ee:a1:71:eb:14:e3:ef:3c:b0:ec:d1:
77:1f:85:9e:34:33:36:7d:42:e0:a8:ab:dc:87:d2:
df:26:63:de:95:32:b5:9c:a1:30:79:b9:ea:40:05:
a7:65:29:75:84:2d:68:a3:65:56:ab:7a:97:b2:66:
52:d7:7d:e3:8d:57:66:2a:e7:14:d8:72:b6:05:f9:
8b:c9:22:c8:56:bc:e3:3f:22:56:2f:75:3e:0e:4b:
8e:83:96:ea:c7:a2:b3:0f:c3:9e:7d:db:c3:94:31:
b6:c7:6f:dd:85:67:80:48:06:33:9a:d1:91:08:d7:
5e:ee:b6:52:c7:fa:cb:4f:73:45:fe:6c:61:90:0c:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:8D:CA:2F:24:1A:22:49:27:49:6C:72:87:F9:13:EE:0C:C1:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d1:a6:6f:71:35:d2:ab:d9:f9:06:42:ab:1a:b6:a4:d1:2a:
02:b9:e5:7c:28:57:90:e7:69:0f:1d:f9:82:0d:c6:60:f0:f9:
53:8b:fc:ef:53:79:88:0d:41:bd:d8:4b:41:46:d5:81:3b:f6:
5e:02:f8:c8:3a:c2:af:0a:08:1b:7d:b1:b8:26:73:f9:2b:8a:
35:3c:96:b4:0c:14:a6:af:10:99:52:28:c0:36:b1:0d:94:6e:
23:9c:1a:44:67:60:f0:56:9f:1e:b5:e4:48:d1:28:22:6e:4e:
d6:23:fa:d8:dc:4f:46:20:1a:f1:f9:42:82:3d:fe:5f:f6:a7:
0f:9d:e6:2f:74:11:6d:53:db:40:3e:89:f2:42:03:92:af:a3:
95:b4:4a:67:25:80:21:c3:95:16:2b:5b:5e:8f:d7:1a:93:0e:
73:e6:a1:af:98:e8:48:4e:24:cc:0c:79:02:0c:65:06:15:64:
2a:23:ba:3d:c3:1d:5f:38:85:e1:23:53:4b:87:c4:5e:82:8a:
9b:79:db:a8:e3:72:52:b1:73:69:82:d8:79:0c:cc:71:1a:c7:
74:a9:ec:f0:45:49:01:99:cf:c4:a8:d0:9d:a0:10:93:c8:cb:
e0:48:90:a3:a6:08:13:60:ed:74:ee:31:de:11:89:00:e4:fc:
8b:50:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:21 2025 by rpki-client