Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1d0bdb-5b3e-3f1b-a763-eacb4c645010.roa
File: ff1d0bdb-5b3e-3f1b-a763-eacb4c645010.roa (raw, json)
Hash identifier: pzKiKDPyy9Gm87864B/q5L3r67DrMraCGqfXl7Jb1l8=
Subject key identifier: F1:B1:4E:91:1D:1E:8A:90:85:C4:9B:5B:13:3B:66:E2:4D:D6:74:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F95B3FCFDBA4A851239040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1d0bdb-5b3e-3f1b-a763-eacb4c645010.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.197.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:5b:3f:cf:db:a4:a8:51:23:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=afdbf781-a2e9-4a2a-9592-0494c8c071d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:8c:72:13:a1:b0:4d:5b:a9:36:b4:5f:51:
2b:b8:89:db:0b:84:87:cf:ec:a0:1b:23:31:f2:b8:
84:4a:e7:69:84:eb:65:ce:cf:cd:ff:ed:38:2c:5e:
0c:c3:70:8b:32:df:a6:29:be:8c:26:b3:4d:7d:74:
50:d9:ee:d8:2b:a7:19:c2:6d:e3:eb:35:43:49:f5:
2a:4d:24:52:79:bf:8e:ad:8d:38:88:a9:61:e2:34:
71:00:e8:a0:6a:b9:27:ed:e6:e7:67:36:84:9a:38:
33:5b:bd:b4:fb:93:e8:aa:08:f8:42:50:1f:d5:47:
c6:3d:c3:3c:7a:d6:d6:cf:19:29:3b:d5:3f:82:ee:
d7:16:c5:af:bd:89:81:bc:66:c9:79:98:ca:1d:53:
47:33:02:aa:48:f5:53:16:e5:d3:79:d3:c6:6b:14:
a2:d1:b0:e3:72:79:01:9c:14:f3:da:10:5e:82:9c:
66:70:f3:d8:3b:9c:12:b0:c6:18:af:50:f2:48:78:
4e:e4:9a:b4:f8:7d:c3:5a:4f:71:a1:28:3f:91:54:
ce:19:59:bd:d8:54:f0:de:e6:42:ae:67:28:42:f3:
5b:b8:ac:bf:e8:71:57:7c:20:57:fa:ed:bd:07:0e:
e6:ae:57:c8:f2:23:3e:c8:43:5c:f4:85:1c:54:5a:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:4E:91:1D:1E:8A:90:85:C4:9B:5B:13:3B:66:E2:4D:D6:74:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1d0bdb-5b3e-3f1b-a763-eacb4c645010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.197.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2f:d3:65:07:34:7d:1e:05:1e:6b:ff:96:4a:5d:00:fc:e0:
57:de:e1:e9:73:83:fd:68:98:72:81:c4:46:5b:8d:f2:44:a3:
78:79:9a:f1:3f:db:dd:36:c1:eb:d8:c4:58:17:a2:81:cf:35:
53:d8:c5:18:94:b4:6b:dc:0c:0f:b6:b8:00:d1:c5:2f:a9:8d:
c2:8a:6f:b7:6a:07:8a:4a:dd:0b:6d:d5:05:75:3d:d6:0c:a7:
87:1b:73:c3:0d:f7:b4:76:8c:0e:9e:bb:ef:e4:4f:0d:f7:b7:
c1:c9:fc:fd:5f:0b:b7:b8:0e:e9:23:51:f2:b6:2d:76:dc:af:
9b:4b:d6:86:3c:a9:8d:05:e3:30:c6:44:b6:1d:62:46:ac:d2:
52:73:25:53:06:c2:fe:a5:92:13:fb:9d:3f:9a:a1:e4:53:bd:
e1:fc:f6:f8:bf:c7:6a:d7:62:27:2c:52:53:a8:11:cf:42:1b:
93:3d:df:70:11:82:ce:f0:43:76:9e:9a:5e:4d:9a:6d:6c:4b:
bc:fb:fb:e2:56:98:55:1f:6b:23:b6:7e:c2:9d:f9:cb:fb:ad:
59:9e:50:9f:2b:5c:cb:df:b5:4c:59:af:e8:80:9c:33:f7:da:
f0:dc:f9:d6:75:b4:a0:29:31:80:d5:4c:c0:d5:b7:c0:76:65:
4e:c2:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:48:19 2025 by rpki-client