Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ace97232-7851-38dd-9a4e-05d61e778d59.roa
File: ace97232-7851-38dd-9a4e-05d61e778d59.roa (raw, json)
Hash identifier: Kse4tZRI6NzQx0y7xDScwZME0RuIig0QBgfSKxZ1P+U=
Subject key identifier: 3B:76:DD:E6:34:2B:69:27:6C:86:D7:1B:13:22:0B:94:98:CF:D2:5F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB165601834169B7E347500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ace97232-7851-38dd-9a4e-05d61e778d59.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.52.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:65:60:18:34:16:9b:7e:34:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0c05f131-150f-490d-a292-3da00477097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:c4:6f:8f:74:92:fd:6c:3f:cb:35:e9:c6:
af:ae:57:de:0b:46:3b:b6:12:76:ce:46:e1:50:fb:
8c:cc:d7:1f:12:69:f7:5b:64:ed:cb:d3:44:d2:2b:
cb:a6:ca:20:8d:ea:fe:fe:bf:7d:1b:9c:b9:7c:4a:
6b:c6:64:9a:0f:8b:bb:60:d0:39:83:84:36:c9:8c:
4a:af:be:d8:96:ef:29:5d:05:5e:4a:ed:14:1b:c9:
74:2e:49:11:d9:29:f8:f5:e7:e4:48:80:18:2f:82:
b2:72:1b:e3:65:1f:ac:ef:61:90:e2:e8:ae:7f:ed:
04:87:25:2f:2f:31:9f:20:0a:53:57:1a:ba:76:22:
c1:bc:b8:6b:e2:45:9d:e9:e3:74:69:c1:0d:60:fe:
ee:eb:d1:07:3a:26:84:1e:e0:19:b6:ec:d0:1c:0b:
e3:88:51:ea:08:90:9e:cc:23:c2:98:f8:65:93:e4:
63:75:4d:b4:83:62:6d:fa:36:ab:30:33:41:cc:ac:
cc:ab:f4:65:cc:f1:66:35:97:be:c3:0d:5b:d2:3f:
1e:35:07:34:29:da:7e:2c:9f:b9:66:54:fe:e6:b3:
c2:6e:da:ae:0c:9e:10:95:de:84:8b:42:2c:1c:ae:
2c:ac:78:64:c9:94:ae:23:f0:3d:7b:4e:64:60:52:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:DD:E6:34:2B:69:27:6C:86:D7:1B:13:22:0B:94:98:CF:D2:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ace97232-7851-38dd-9a4e-05d61e778d59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.52.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b9:f6:0c:ff:45:3e:0c:f6:dd:c1:77:66:7f:d3:c0:e8:aa:
e5:4e:88:77:4b:30:76:21:cc:b4:b5:eb:2c:ee:54:ed:ab:17:
e0:d4:9b:93:16:93:5c:b7:34:b1:15:d5:b6:7a:e1:43:ee:59:
3c:20:bc:82:84:42:99:02:da:5d:73:17:f2:62:22:b3:f0:35:
ad:32:f1:1a:f5:ab:b6:44:e9:05:58:d5:16:44:38:fa:ce:7a:
f0:0d:89:79:72:3a:fc:96:2d:da:ca:0e:e1:ec:a6:e2:db:52:
50:e7:81:84:7e:8b:64:8e:d7:9a:3b:b7:d1:14:08:84:be:5b:
14:37:79:d2:bf:9b:22:fe:a9:53:57:51:67:63:3b:9f:59:ab:
56:17:5a:2c:35:56:96:cb:6b:9f:f5:7f:b2:c6:7f:69:c7:2b:
cb:98:ba:d6:e9:77:d7:e4:4b:b1:76:b4:4b:8f:61:c6:ba:70:
75:8f:d9:55:9f:d3:60:f9:3e:fe:c1:64:35:8c:43:1a:8a:62:
a7:36:09:05:54:26:5c:e9:4e:85:a3:12:1a:41:0e:ab:24:c1:
d5:bc:66:6b:bd:e4:bd:c1:da:a9:f4:68:96:2c:0a:72:0f:3d:
aa:7d:bb:a2:42:3a:65:62:f1:1c:dd:50:d0:df:55:99:4d:ec:
2b:fb:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:58 2025 by rpki-client