Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5829ca-efd6-32f8-a5ae-2d5c4e3fe02f.roa
File: be5829ca-efd6-32f8-a5ae-2d5c4e3fe02f.roa (raw, json)
Hash identifier: CCa1O1IBoxnGtkYKQuqj1D+mnxJBZB7Wyno1g0wsXko=
Subject key identifier: DE:1B:1F:7A:33:AA:80:F7:F8:C5:46:2C:98:75:86:1A:3A:80:B3:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB158CE2D87012F79A0EAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5829ca-efd6-32f8-a5ae-2d5c4e3fe02f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.222.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:58:ce:2d:87:01:2f:79:a0:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b39a6fa3-f6e3-46db-8836-980b9ec91279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:5a:3b:4b:8b:fa:46:af:e3:68:cd:c8:bd:
13:71:f7:dc:c5:f3:fe:85:be:1f:de:33:bb:6a:20:
fe:84:27:59:4d:8a:c4:23:21:f9:43:0a:0d:57:4d:
11:58:ed:27:4e:e7:e9:69:09:df:c8:32:b8:9a:26:
1e:0c:67:df:cc:7a:8b:8d:0c:c0:f5:e6:f2:7c:6b:
5f:4c:37:c5:87:c7:90:a5:57:02:9f:01:07:73:3e:
f4:e5:9e:ec:2c:2b:9a:cd:5a:e4:a2:fc:d6:ef:e0:
52:f5:83:96:ce:b3:d4:10:12:94:46:9f:50:80:88:
aa:1f:41:c7:29:dd:85:1b:f9:bb:15:94:3c:73:f7:
5a:3b:b8:e7:3f:58:43:88:c0:7e:8c:b5:02:41:2f:
76:8c:76:72:fd:eb:72:c0:92:4d:51:ed:e6:5c:99:
42:2c:d2:4e:31:fb:da:15:43:d2:11:0e:e4:2b:6e:
9e:5f:77:b6:b0:2a:d2:1e:22:13:0d:6c:e5:f6:cc:
38:bc:a8:d3:70:e1:0d:34:89:06:2d:43:ca:cc:fd:
9b:48:b9:a9:70:2c:80:01:a0:69:3e:ac:d9:8c:78:
16:9e:ed:87:f9:06:10:3f:6f:d6:96:30:45:1c:f9:
b1:88:3a:f4:71:75:30:d6:93:4a:e5:19:d7:a8:9e:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:1F:7A:33:AA:80:F7:F8:C5:46:2C:98:75:86:1A:3A:80:B3:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5829ca-efd6-32f8-a5ae-2d5c4e3fe02f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:dc:3f:b4:2a:c6:50:2f:bb:ad:5b:ae:1b:1a:fc:5e:4e:57:
c2:c4:6c:f3:49:f9:5c:bb:c3:74:d8:62:d7:d6:76:2b:10:9c:
24:07:00:e4:9b:34:46:ca:8a:30:28:1e:dd:f0:e2:13:8c:41:
36:e9:f0:20:5c:43:67:35:8c:fe:8d:33:68:60:fa:87:78:b2:
ee:b0:e6:8a:b0:93:a4:cb:30:3f:b7:e6:de:4d:b7:37:ba:40:
fc:f6:11:2f:1e:a6:fa:43:8c:9f:fe:f0:bc:be:b3:29:c4:3a:
07:54:29:f0:ba:46:5d:21:49:d1:7c:a8:05:30:4e:b2:3e:a4:
3b:cb:48:fc:f8:bd:8b:b6:c1:b2:fb:7f:5c:96:9d:e4:1d:cc:
3c:57:d9:c6:30:3a:91:3e:72:3b:49:7e:86:0e:be:86:2e:52:
a5:c2:b0:85:e7:ad:ba:d5:7e:50:f1:4d:e2:2f:62:5d:bd:20:
b2:6a:b5:02:8f:86:8a:d1:f0:93:ab:70:f5:5a:35:de:f0:c1:
de:c8:cd:72:97:bf:58:2e:00:5c:7f:9d:13:00:05:c8:eb:26:
e8:16:f9:92:c6:a9:23:3a:30:96:07:b6:4e:e1:5b:b9:00:7d:
75:3f:1e:4f:38:f6:e6:77:48:88:1a:41:ca:d9:97:1d:26:68:
11:3a:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:53 2025 by rpki-client