Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa
File: be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa (raw, json)
Hash identifier: pzigKslmC/0lgcq3X7rAiPLdue2RTiMqEykGu32+XsI=
Subject key identifier: 5B:D3:A6:4C:86:3A:B5:3E:8A:72:6A:E1:CE:30:2C:F8:C4:CB:76:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C69516D245CE7773CDA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.62.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:69:51:6d:24:5c:e7:77:3c:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=85b45fe9-f133-47b3-a26b-4be63cca151c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:a2:8c:aa:76:24:25:d2:b8:58:bd:0d:70:
f9:5d:71:fe:32:cc:a4:75:60:21:ab:93:6e:7f:56:
ce:04:0d:1c:1a:3f:39:50:7a:a4:e9:17:ee:08:ac:
bd:95:0d:39:17:01:bd:e7:e7:77:f3:8d:67:f4:eb:
7c:1f:43:24:f8:d7:27:70:55:59:13:11:65:fd:7b:
a5:99:0b:af:b9:cf:fb:26:07:8c:9f:75:99:45:88:
28:9f:6d:f1:24:a6:fa:ce:9c:0b:d2:1c:c0:26:db:
9e:08:ec:e9:95:a8:48:b8:76:c9:42:15:f6:7a:4f:
24:c9:97:e5:da:ee:02:c7:6a:4b:26:49:c3:31:1c:
28:82:3a:1d:8a:43:52:4a:f6:eb:2d:58:f9:13:2b:
99:b0:be:9f:4c:ed:5c:52:70:d0:90:ee:97:0d:75:
1e:0a:b9:04:9a:f6:fd:b1:ce:59:6d:8a:48:cc:ee:
5a:81:be:16:3d:ed:2e:0f:13:76:0c:bc:a7:e8:2f:
27:32:45:87:af:b4:a6:38:91:3f:f0:71:45:22:a2:
3a:3a:c7:a9:d0:e6:c8:7d:12:d1:2b:ea:b1:a1:11:
88:05:fe:b7:69:5e:ca:03:02:c5:29:de:38:21:00:
0e:03:f0:ea:4c:9b:ab:14:bf:e8:c8:f2:74:e7:a0:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:A6:4C:86:3A:B5:3E:8A:72:6A:E1:CE:30:2C:F8:C4:CB:76:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be224e39-f13e-3ad6-8ac1-0dd670ed06a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.62.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:b5:ea:48:5f:4c:fe:9f:fd:e8:3b:2d:29:b9:97:aa:f9:c3:
42:ad:46:ec:7a:cb:7f:52:97:eb:11:17:34:1a:e5:a6:40:8b:
10:27:7e:9b:78:ad:5d:a6:53:4f:3d:a1:e0:7b:d2:3f:2c:0e:
82:93:f1:97:a5:c4:0f:78:a9:41:28:18:92:dc:c9:31:b9:51:
21:c2:fc:77:f4:b2:d1:99:db:e1:8c:7a:b5:8a:75:71:2e:b5:
86:4f:15:66:65:7d:32:1a:50:9f:d7:ec:9e:49:e5:8f:00:c0:
c6:30:ba:42:a0:5e:45:54:6d:45:76:fa:74:a9:3f:e8:25:ca:
fa:3b:22:49:81:0a:5e:f3:bf:71:93:43:55:96:70:0c:03:81:
38:95:43:2c:48:85:21:86:27:41:91:0c:9f:45:7c:54:7f:d9:
74:1d:7e:a0:bd:7a:52:03:9a:1a:b1:4a:f4:ae:31:14:73:be:
34:63:d9:22:97:c5:0f:d1:48:53:a0:44:3d:23:12:42:23:b7:
6f:52:38:cc:ec:de:8b:69:78:63:7a:b3:b0:0c:61:e9:4d:89:
f8:2c:23:d0:5d:ac:8e:e0:8b:46:ff:5a:f9:7d:be:fb:79:53:
e9:35:9a:c5:4c:82:da:fb:35:1c:8c:77:3c:36:df:7b:b7:75:
41:76:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:26:01 2025 by rpki-client