Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a738e6e9-0ac3-3521-bc0a-711cefb2e974.roa
File: a738e6e9-0ac3-3521-bc0a-711cefb2e974.roa (raw, json)
Hash identifier: pCMH8a9hLzLghmI1fZgPi9cfjAP1c1jNUSK868SiynQ=
Subject key identifier: 55:D3:5F:60:D4:39:65:32:43:4C:8B:3A:73:A0:C7:3C:E2:8C:AC:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F76AD42654681578EE7F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a738e6e9-0ac3-3521-bc0a-711cefb2e974.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 98.217.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:6a:d4:26:54:68:15:78:ee:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=18f8cc07-c322-4ad8-8cbd-1c453d0b3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:b0:ce:2a:a0:3d:6a:2e:1e:38:d3:8e:63:
1b:c2:1a:a5:82:e6:22:5d:cd:6d:1f:e3:d6:29:81:
d7:fd:46:8e:ce:97:d9:8a:85:69:d1:6d:d6:d2:86:
a7:d3:6d:7d:e9:d8:00:b7:f2:2c:a7:c0:8a:77:85:
91:61:2d:50:4b:62:56:a2:bd:a0:d6:bd:95:e7:e0:
c3:27:f4:0a:c9:29:0d:aa:7c:3e:ef:0d:13:f8:8d:
86:c0:7c:6c:0d:db:49:84:a0:db:a7:8c:7a:f3:bf:
4a:62:b6:4e:e1:0b:51:7b:92:e7:d6:9c:0a:33:52:
62:73:8d:df:d3:68:d2:e4:28:0a:39:44:6a:47:a5:
e4:d9:52:d7:79:55:ad:db:08:da:68:e2:74:02:89:
3e:c4:93:8c:5f:98:94:47:3a:75:25:eb:30:e7:95:
f4:da:3c:39:24:a6:b2:4f:a7:70:e1:f6:af:3a:fc:
7c:5f:61:40:ad:bd:01:4b:48:c7:3e:c2:36:78:60:
82:eb:24:d0:00:42:61:bc:0d:70:0e:5d:b3:61:74:
19:2d:8e:55:2c:78:8b:c5:7e:47:00:d5:b3:f4:f1:
a8:77:69:98:19:a9:9c:06:2c:41:aa:da:f7:31:0d:
ef:0b:b9:a5:07:3e:ff:95:0d:bc:7c:3a:85:a0:04:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:5F:60:D4:39:65:32:43:4C:8B:3A:73:A0:C7:3C:E2:8C:AC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a738e6e9-0ac3-3521-bc0a-711cefb2e974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.217.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:09:0f:7f:01:4c:cd:b9:1e:eb:18:4a:e8:77:4a:f1:cd:64:
05:a9:d9:fc:bb:05:a9:bf:1a:e7:69:f6:95:8f:2c:de:15:b0:
20:be:f6:58:61:81:f8:a2:49:1d:f8:ad:67:93:8c:55:1c:1e:
f2:4b:8f:8b:c2:11:c4:eb:b3:a5:b5:dc:a3:7b:1f:18:d3:62:
8e:7d:03:79:52:b4:e9:ad:91:ab:55:95:c0:90:93:7f:2f:b3:
97:e8:b1:9a:1f:1a:ee:4b:f6:f9:6d:ab:b6:37:51:90:c6:f4:
da:dd:fe:c8:3a:f4:b6:87:34:e0:27:51:f8:88:6e:0a:d4:51:
b8:fd:fe:96:2e:9b:37:18:69:d9:c8:19:b2:13:32:25:7d:76:
0e:0d:4c:9d:e3:48:6b:e0:10:78:f4:6c:cd:68:8c:7b:30:cb:
9b:44:99:46:d2:3b:88:d1:cb:55:d1:b6:92:af:15:12:51:fa:
81:89:f4:5a:cc:3a:4a:1a:3e:f3:c6:18:10:a9:b0:38:e0:f6:
d6:a9:23:32:fc:3e:6d:b6:15:62:04:d5:77:83:6e:83:65:4f:
a5:77:5f:56:98:83:7f:91:9e:c4:c6:27:51:41:e6:e6:43:93:
92:7f:34:12:ad:51:4f:d0:83:a6:f8:26:fc:87:e2:1a:e4:a8:
4b:0c:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:17 2025 by rpki-client