Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef6b108c-9b0f-3ece-adb1-8a00f2ca19ba.roa
File: ef6b108c-9b0f-3ece-adb1-8a00f2ca19ba.roa (raw, json)
Hash identifier: ZDt3cYZG9ldsLJdjjnWmo8Drt2zuSA6R61aBaGc1u+s=
Subject key identifier: 12:30:E0:BD:07:FA:EF:62:3A:9E:F6:9E:2A:CD:87:BE:D9:63:83:98
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFCFEA5DF6481983B5C5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef6b108c-9b0f-3ece-adb1-8a00f2ca19ba.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.32.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:cf:ea:5d:f6:48:19:83:b5:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=76caa460-19c9-4340-a866-6b76f37325a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:12:e3:39:6a:bc:50:2e:da:0e:db:56:13:44:
69:5f:af:3b:fe:ea:df:e9:93:65:b4:e2:b8:f6:db:
0e:bf:f9:a1:70:99:89:fa:d3:76:e3:5d:22:25:df:
e8:65:e5:12:c4:89:2f:8b:4b:83:e2:5d:97:ac:4d:
01:52:f3:de:5c:02:48:19:27:92:fd:47:56:d1:c9:
0c:7b:62:98:b8:87:c7:79:8c:5e:58:df:67:55:e5:
1a:7d:98:55:25:8f:f5:2c:f3:88:7e:5f:d3:bf:d4:
e3:88:31:f6:ca:e6:9b:25:84:da:c4:6b:db:b4:b7:
94:7e:ee:cb:85:f8:0c:32:d7:8e:20:5f:9f:d3:11:
4c:1a:c9:b4:3c:2b:14:81:f0:14:ef:f4:0d:3f:10:
75:26:90:59:92:69:ce:0b:32:ba:b0:cd:62:58:26:
b0:7a:08:4c:08:79:05:e1:a0:af:af:c6:16:5d:29:
87:f1:2b:bb:5f:3f:40:b8:c9:29:60:40:5a:65:55:
8e:72:ac:5d:4e:4e:10:f3:b4:e1:09:cb:f8:0a:90:
6b:21:53:2d:fe:7e:54:60:54:32:4f:bb:78:a9:f9:
eb:51:c2:81:56:d0:f1:52:17:23:9b:c5:04:de:5a:
ff:6c:22:0b:4e:6b:e0:21:56:b4:71:97:eb:1e:d8:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:E0:BD:07:FA:EF:62:3A:9E:F6:9E:2A:CD:87:BE:D9:63:83:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef6b108c-9b0f-3ece-adb1-8a00f2ca19ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.32.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:b6:f7:e0:b4:08:5c:88:ad:e6:5a:c8:df:76:a7:b8:e2:1a:
f4:b5:c6:4d:d4:da:f6:fc:ec:3e:e7:3f:33:14:4b:90:74:b6:
7a:a2:20:10:0f:9f:8e:6c:f5:30:bb:18:c7:34:8f:a7:d3:58:
db:63:ea:aa:58:84:08:71:2b:44:a6:ad:e8:b9:5a:30:ae:03:
55:9b:13:c1:c5:aa:40:45:bc:31:06:f5:f0:f0:4c:bd:23:c0:
b4:3a:64:62:ef:11:19:cf:97:50:03:0f:53:e1:f3:9d:4e:e0:
aa:48:f0:b5:db:c2:a3:94:b7:fa:cc:35:98:ca:f0:15:f4:14:
85:04:a5:28:73:50:dd:e5:2d:53:4f:29:67:5d:cd:1a:bc:fe:
e0:67:ef:e4:50:7c:ec:e3:73:74:9c:dc:fd:ad:e7:d3:df:4c:
cc:6a:7e:d0:11:35:f8:6f:11:5e:22:cf:4b:2c:a3:ef:30:a3:
52:b4:29:5a:16:32:4a:7e:81:f5:9f:a2:26:ab:1f:71:2b:5e:
2c:c9:a7:8f:05:54:35:85:fd:22:ea:50:71:ae:9a:67:68:2c:
87:93:72:fc:dd:6a:93:6f:36:f6:13:ca:08:d2:12:d9:61:dd:
6d:f7:56:65:e6:c2:57:d1:7d:7d:ac:b9:fa:de:ea:a8:2f:38:
c6:a3:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:18 2025 by rpki-client