Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e747599a-0b16-3209-a5f9-c5f2aebf8c7e.roa
File: e747599a-0b16-3209-a5f9-c5f2aebf8c7e.roa (raw, json)
Hash identifier: FAFrOxpM2THxbMbMiRoZuz/MPmDoWReLU9H/GJW3wVA=
Subject key identifier: E0:6A:39:55:93:82:94:52:1C:43:94:BD:CA:FC:D8:CD:A2:F9:8D:76
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F76ABAAD1A1F5C0C76B680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e747599a-0b16-3209-a5f9-c5f2aebf8c7e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 98.217.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:6a:ba:ad:1a:1f:5c:0c:76:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1f043349-3576-4491-856a-fdb9b66c9466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:e3:d3:d5:9a:82:f7:83:0d:70:42:8d:a3:
2e:37:eb:0c:84:70:a4:a9:17:0a:ea:8c:68:b2:11:
30:ff:97:69:2d:f0:d7:81:26:31:16:c0:8e:d6:9e:
3b:17:39:1a:54:8c:1c:38:90:17:ec:1c:f4:bb:2e:
a3:ad:2f:b6:0d:6b:04:eb:61:8a:ba:26:4a:19:16:
85:60:97:2e:51:fa:34:4a:d4:b8:a0:3a:78:fa:ca:
54:ea:66:8f:d9:d0:9a:45:af:5e:0e:f3:f8:74:d5:
40:74:40:0a:86:b6:ec:92:a4:66:42:a2:87:36:05:
25:71:a2:35:e5:11:df:b9:7a:3b:cc:f1:2a:17:a8:
79:aa:ab:6e:8d:ea:fe:bb:d3:5a:a3:7b:1f:3a:ef:
c7:7d:f4:90:6a:7f:4e:51:43:5e:f6:94:a1:0d:f7:
ee:d3:27:18:b5:af:8a:fb:99:2c:49:18:3a:2f:10:
93:b9:48:08:22:5f:85:84:aa:13:03:85:68:68:8b:
5a:a4:8c:19:96:f0:73:66:b1:dc:a6:1a:ba:4a:a2:
54:e0:5c:32:c2:a8:c5:3e:82:34:9a:e4:98:b5:63:
b5:ec:8e:ba:c9:33:6d:8b:7e:99:3b:2a:81:d8:7a:
5b:39:ec:ce:e5:71:58:46:86:51:51:3b:8d:cb:fb:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:39:55:93:82:94:52:1C:43:94:BD:CA:FC:D8:CD:A2:F9:8D:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e747599a-0b16-3209-a5f9-c5f2aebf8c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.217.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ea:0e:6a:b0:ba:36:53:9f:18:0d:fc:2b:c9:24:46:cc:1e:
30:09:e0:fc:ea:50:be:d2:ee:b9:ee:94:7a:a2:d0:f8:7b:78:
3d:65:67:3d:4e:6c:30:81:96:e1:f2:89:81:7d:5d:db:54:45:
1c:42:df:8f:2c:c6:7e:35:e9:75:4c:8e:91:34:e6:49:57:fe:
2f:22:14:3a:57:c4:84:47:0a:75:c6:24:a4:e2:c3:fa:18:43:
cb:e1:9c:1d:76:2b:be:c4:6a:87:4d:6f:bd:57:c7:2a:28:f4:
f9:35:84:ba:b7:d9:65:04:df:9d:92:a0:3e:d2:55:d6:98:3b:
8a:12:62:e0:c0:8b:52:38:78:41:f6:f6:a2:82:ed:7e:7e:8b:
57:b9:49:ba:0d:6f:8d:ab:3f:a6:bd:4d:e0:de:11:d9:65:ca:
49:59:d9:17:32:32:5a:a4:c6:de:b5:fb:99:50:35:42:16:67:
ec:3c:63:9d:57:8b:09:66:b0:86:ce:f4:6d:b5:39:1b:fd:30:
15:72:79:6b:66:88:d5:ac:31:6c:7b:32:37:96:45:c2:a5:2a:
ac:59:d0:d8:da:d1:48:42:9a:48:d2:84:cf:e7:12:58:cf:0a:
31:46:e5:5b:1b:82:3c:b9:40:8e:4e:72:e5:ec:1e:d9:b3:fb:
d8:b5:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:09 2025 by rpki-client