Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5423ffa-83fb-3d2e-ab2d-18576f30f63a.roa
File: c5423ffa-83fb-3d2e-ab2d-18576f30f63a.roa (raw, json)
Hash identifier: lVZEw1+IS8dPKBi2oKEfRQnupDj/mSSDs7lw9MyVg5E=
Subject key identifier: 9A:63:8D:46:E8:4A:39:27:AA:89:20:87:23:D0:7B:03:B6:8C:40:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1EFC5AA4CCA9292D2BE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5423ffa-83fb-3d2e-ab2d-18576f30f63a.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.42.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:ef:c5:aa:4c:ca:92:92:d2:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=57ab3429-d51b-425f-807d-4b0cb1a51462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:52:65:f3:60:f6:71:62:c6:12:c0:e7:65:
f6:c2:cc:4d:92:e2:da:81:dc:3d:3e:76:bf:4e:c5:
85:75:23:0c:6d:29:c6:75:fb:0f:9f:8e:02:e6:92:
5e:cb:fe:d5:33:0a:99:b6:e6:6e:5c:74:24:8d:4c:
84:18:46:4c:ef:1b:90:14:32:27:10:2e:f4:49:11:
e0:39:c7:aa:e2:9f:a3:a9:9a:c4:23:80:56:cd:6d:
32:a1:3a:68:79:fc:88:f7:b5:6f:85:d1:52:fa:27:
07:bb:7b:95:0c:0e:3b:f5:38:19:de:f2:86:91:d3:
77:b7:80:69:4c:f7:10:5a:1f:77:1c:1f:b3:f4:14:
cd:8b:6c:a3:16:75:05:52:3b:28:42:4d:88:fc:59:
40:f0:95:1b:12:a5:7c:47:b7:21:62:80:4d:64:67:
38:6f:45:ce:8f:f0:be:68:13:5b:32:80:40:48:46:
c6:bb:c4:61:bb:97:ab:65:bc:13:95:e7:34:33:44:
85:e7:a3:5c:81:3d:ad:a2:44:35:31:0f:e7:60:9f:
e0:1c:87:84:e0:61:df:9f:ba:01:54:e5:90:a2:1e:
f3:d3:17:70:b3:d6:4a:8f:db:ba:b4:15:ff:a3:1c:
fe:d0:95:44:21:3e:f8:fa:3b:a5:5e:e5:95:97:d9:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:8D:46:E8:4A:39:27:AA:89:20:87:23:D0:7B:03:B6:8C:40:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5423ffa-83fb-3d2e-ab2d-18576f30f63a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:da:d3:62:84:ad:19:32:78:d1:af:84:54:ad:4e:e3:a9:7e:
96:6a:07:06:fe:0f:b9:d2:e2:fa:b6:4d:f1:e2:49:13:34:74:
0e:cf:86:be:5b:3b:4f:1d:cd:7c:7e:0d:54:da:4f:43:c5:10:
63:06:b0:1f:30:87:4a:5b:3c:5a:4c:cd:7b:47:c2:ef:ef:c1:
3b:2f:ee:f3:08:a8:2b:54:66:a3:44:52:f7:00:bd:bb:91:fc:
c6:e5:42:46:8f:59:01:ca:e9:24:5e:69:61:e5:e6:53:84:fc:
96:e5:80:e4:fb:2f:29:3b:0a:61:ed:eb:c8:76:8a:bc:69:7d:
45:f3:f1:84:2e:c7:04:9c:79:92:21:0f:0b:ef:1d:42:00:ff:
e1:10:da:2e:83:26:08:24:48:f7:76:6c:fd:72:85:83:36:53:
6a:6c:83:af:cf:65:87:99:55:1b:34:b4:a6:a5:4c:79:06:0f:
42:d8:d5:37:fa:90:ca:26:86:cf:6c:a7:c8:17:b3:aa:b0:67:
80:38:af:d7:25:37:6c:5b:24:e5:17:f7:59:32:8b:73:c7:d9:
d3:df:49:99:98:54:20:45:a1:00:00:0e:7a:68:da:7c:ed:d3:
56:f4:1a:a5:ef:84:bc:d1:46:0c:6f:e7:4a:39:58:95:b6:7b:
1b:ad:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:43 2025 by rpki-client