Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba1745ac-fe70-32bd-8735-a792bce41666.roa
File: ba1745ac-fe70-32bd-8735-a792bce41666.roa (raw, json)
Hash identifier: 3DZn9B2wQ3FC63vKOshvq7NcMxNiako/H1RCBQkDZW0=
Subject key identifier: 32:8F:90:8A:CE:A5:82:A5:5D:68:77:39:E5:31:91:DC:D0:FE:0F:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFC23CF5E146CF0B2B2780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba1745ac-fe70-32bd-8735-a792bce41666.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.214.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:c2:3c:f5:e1:46:cf:0b:2b:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=8b9d65aa-dd5b-41cf-b666-6dcdb7ea9d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:bf:7c:17:67:58:82:41:45:2b:bb:ea:94:
3d:2a:14:84:df:20:6b:36:d5:b8:f7:1d:1b:6d:f8:
70:93:37:e8:e0:58:63:13:4e:42:8b:73:2d:f8:19:
9a:b4:21:89:dc:28:67:aa:9f:e9:84:10:7f:2d:54:
b4:49:92:ca:d5:ab:c2:18:35:fc:e5:a5:3f:e4:13:
03:7e:41:90:e9:1a:8c:51:6c:71:58:95:aa:55:ad:
82:5f:5a:cf:3f:a3:a9:88:da:b6:b6:5b:41:c3:73:
fd:b5:e4:7c:9e:10:38:bb:de:a1:e1:bf:26:bd:57:
cf:23:a8:ff:f4:fb:b5:22:c0:84:d3:f5:55:8c:9d:
86:1e:88:15:e9:73:1c:93:f0:13:ae:0e:8e:07:07:
87:43:27:62:ab:b1:05:77:33:fc:df:04:22:c3:5c:
e8:1f:b3:63:7c:08:bd:f1:86:d8:cb:5c:2d:1d:3c:
d1:da:46:e4:bb:cc:ad:da:75:0d:23:a9:15:cf:c1:
be:e0:bd:bf:cf:5f:31:b0:62:cd:3d:46:16:93:af:
44:1d:2e:da:08:6e:31:42:fd:ca:2c:1c:60:e0:b4:
f9:20:94:73:68:ce:1e:c3:68:0c:27:a4:08:90:f9:
89:5f:51:96:76:41:9c:5c:35:15:7c:fb:8a:63:91:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:90:8A:CE:A5:82:A5:5D:68:77:39:E5:31:91:DC:D0:FE:0F:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba1745ac-fe70-32bd-8735-a792bce41666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.214.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:ca:70:2d:1a:c9:ba:3f:99:b8:1b:09:2c:6f:65:bd:15:ff:
cc:75:7b:a6:4f:fa:c9:74:ca:89:d1:04:ad:ce:9c:89:5a:2d:
75:80:5f:24:74:ab:d5:6f:b2:4f:5e:6c:4f:74:65:23:37:65:
fc:e0:72:f6:c3:22:0f:2e:3f:7b:47:2a:81:9f:6c:9b:d9:ae:
98:7c:8c:19:70:32:4a:6a:a7:8f:3e:4d:25:a4:e5:df:45:4b:
bd:d4:bb:0d:76:b7:ac:69:68:7c:c3:47:ba:ca:b5:5e:ec:92:
c3:b4:85:37:8f:1b:07:41:bc:5a:16:6d:16:0b:fe:5e:34:37:
3d:5b:2c:5c:41:7b:ba:11:c1:30:c1:40:c6:06:95:a2:a5:70:
c3:1b:42:f9:8d:3c:1e:a5:af:97:16:20:7a:21:04:09:ed:bb:
47:30:92:77:f9:e3:55:e4:2c:2f:49:6f:ba:7b:1f:f1:12:be:
68:a6:4d:8d:a0:8d:f8:b5:48:6e:18:65:92:2c:9b:d3:a7:b4:
b8:13:65:85:df:7f:0d:dc:a1:8f:5e:a1:11:37:ee:c8:3a:53:
b6:f4:76:7f:8a:76:9e:16:2e:78:0f:2f:52:f2:cf:2b:59:75:
a6:08:26:e4:52:14:3d:ef:f8:0a:65:9c:89:c6:83:93:1a:bd:
8d:6e:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:27:19 2025 by rpki-client