Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf245f4-f3c4-3686-9354-5e93737384ba.roa
File: daf245f4-f3c4-3686-9354-5e93737384ba.roa (raw, json)
Hash identifier: XFaDz3CcWlRXtYUPQycD7/FFkWaCkhvuBxMzezPKDkQ=
Subject key identifier: 4E:FE:76:87:67:E6:6F:CF:23:C7:93:48:AD:67:E1:C1:AB:E6:37:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C5C7E2FA5DCD1FC7B0700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf245f4-f3c4-3686-9354-5e93737384ba.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 98.54.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:5c:7e:2f:a5:dc:d1:fc:7b:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=56682258-1ebe-4929-b09d-30245acbdd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0f:4f:2f:85:e3:3c:e5:49:d9:75:46:57:b8:
8f:fb:27:67:e9:05:9c:88:74:6b:c1:4c:6a:60:d1:
a1:f0:be:33:71:0b:53:9f:ae:2e:de:00:ec:03:ba:
76:6f:e7:46:04:0d:aa:3e:3e:04:ac:fd:54:60:60:
a7:24:ef:35:00:b6:98:d1:4d:bc:d4:f8:48:8e:13:
af:fa:09:9f:4d:c9:51:15:04:25:76:fd:87:37:e9:
08:7f:fd:ce:0c:9f:5e:56:e3:98:26:64:e8:85:26:
53:f7:5e:9e:e8:a9:00:67:0f:5a:f1:e5:b4:c1:1b:
ad:6d:2d:19:78:7e:86:bf:5f:b6:fe:7a:02:99:f8:
1d:95:e8:b5:7a:fd:c5:f3:41:fc:7a:d1:dd:22:ac:
68:93:a1:7c:ba:ff:63:84:95:f8:34:19:5c:12:9e:
95:30:f8:9f:87:80:01:15:db:83:26:3d:08:8a:2a:
8f:5f:b4:84:bd:64:bf:25:f6:d9:e0:f6:75:0c:c0:
75:fa:3f:a2:32:cb:10:dc:68:b4:9a:a6:83:ae:f5:
7a:c7:a5:44:b5:c3:b5:ef:35:f6:1e:dd:37:e8:9c:
5f:94:ae:cd:dd:e8:17:89:2f:11:6f:a8:c5:3e:57:
e8:26:c6:c2:bf:82:e3:7f:9a:3f:b9:5d:ad:63:f9:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:76:87:67:E6:6F:CF:23:C7:93:48:AD:67:E1:C1:AB:E6:37:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf245f4-f3c4-3686-9354-5e93737384ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.54.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:cb:f4:bd:44:f9:59:27:08:42:61:e4:86:10:9a:47:12:d2:
bc:7b:f9:45:80:0a:44:7e:99:f9:bf:7a:61:ba:7d:28:77:fa:
a7:31:23:06:30:b1:91:bf:ca:b2:a8:e9:e4:2b:95:0d:d7:0e:
ec:79:72:0b:43:3b:5e:5a:c0:bd:ac:68:0e:ff:6b:ae:f7:23:
0e:48:ae:7c:97:b4:78:a5:79:79:4e:e2:bb:c8:21:8a:cb:db:
82:06:a6:eb:c7:ac:09:30:60:b1:06:15:23:74:61:9b:4b:6d:
f0:99:9b:e7:e1:21:4e:92:3d:3a:c6:be:30:aa:7b:66:f4:a7:
01:19:ec:1a:bb:d2:ef:93:cf:7c:df:cb:82:4a:3e:bc:5f:3d:
ef:58:e1:44:bc:6c:28:f4:f8:3d:85:4d:9d:1d:fe:b1:88:73:
2e:b0:46:85:d8:83:40:c3:90:d4:c8:77:1b:48:df:92:23:8d:
21:77:42:77:b3:f5:71:63:66:f0:c0:0d:8a:a7:e0:eb:07:ea:
93:7b:2d:9f:ef:c8:96:92:61:9b:1a:29:ac:8a:2b:cc:8e:a4:
7f:6e:c0:8d:b7:ba:b7:08:e4:98:aa:bc:2d:d7:3d:8c:26:de:
d7:de:78:7c:16:fb:6f:cc:c9:28:97:5c:16:a7:69:b1:3c:33:
97:64:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:49:00 2025 by rpki-client