Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035f3333-f10c-3264-bceb-56902d2f7d1c.roa
File: 035f3333-f10c-3264-bceb-56902d2f7d1c.roa (raw, json)
Hash identifier: 0KYRmx+DV6CSX8oKZmopjtF6Gi3A5Z06HybLT9rTlm0=
Subject key identifier: 53:B7:68:82:23:3C:34:C7:16:92:3A:A9:DA:23:6E:E1:D3:13:9D:11
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130E3C08F60102094C9DCF
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035f3333-f10c-3264-bceb-56902d2f7d1c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.46.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:0e:3c:08:f6:01:02:09:4c:9d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=53a856e5-affa-4303-927b-639585995844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:9c:be:e3:33:43:26:b2:f1:bb:0a:9d:3c:
19:e4:1f:62:e1:cc:d6:f1:d7:45:f0:76:b9:0d:cf:
66:df:ae:ce:bd:bf:b1:32:a6:0f:d5:55:f0:b5:cc:
46:8d:fb:5d:42:d3:f5:07:85:d6:df:c8:89:3e:20:
e9:b6:f4:9c:f9:72:bf:79:c0:06:32:fe:97:d1:6f:
97:51:82:0e:e2:08:a1:f5:3c:1a:26:b2:f6:7f:54:
31:83:89:27:32:49:2b:c6:9c:46:c0:1d:c2:45:1e:
40:f4:8a:83:36:7b:51:46:c7:1b:c0:8b:cb:1d:c5:
37:80:07:40:c2:cb:ee:91:00:ea:f4:f1:9c:cf:70:
ac:ea:92:16:37:e6:85:b1:09:41:72:ab:8f:41:be:
80:49:f8:31:a1:9e:d2:ba:8d:34:29:98:ae:40:9a:
a3:d5:fb:1c:9d:35:b1:bb:48:78:19:9b:43:90:c6:
c9:c8:00:e5:bb:50:eb:67:70:11:58:cf:64:c4:6e:
2e:81:a1:19:63:ce:c7:d8:e7:9f:10:ad:31:b3:9c:
3f:c1:ca:e9:f6:e2:fa:06:d7:c1:cb:84:43:bc:fb:
7c:e4:8e:b1:75:cf:e1:ae:22:62:4f:b9:90:52:d9:
d6:11:33:1f:11:e1:ed:87:b2:f9:18:2e:ec:d3:ed:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:68:82:23:3C:34:C7:16:92:3A:A9:DA:23:6E:E1:D3:13:9D:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035f3333-f10c-3264-bceb-56902d2f7d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.46.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:96:0d:a3:32:51:05:3b:f2:64:a5:d7:c4:5c:53:c4:86:d2:
ad:db:81:1e:84:2f:4b:25:00:2a:0f:7a:32:4a:9a:3a:85:29:
1a:54:d0:64:56:e5:a5:b5:11:12:28:33:1b:7b:87:b7:d5:95:
30:0b:91:a6:72:56:3e:a8:22:e9:5c:87:5f:7d:44:89:a7:31:
a9:f0:06:39:a6:ad:19:f5:22:7e:a0:0a:29:a3:13:ea:ce:14:
bf:31:39:2d:d2:90:2f:bd:cb:c0:69:50:63:f1:c7:a6:6a:30:
3e:4c:26:b9:ca:cf:85:ad:e3:29:e6:fa:f7:30:54:54:ee:72:
d2:77:bc:b4:de:3a:1d:fd:50:44:d2:df:4f:fc:1c:48:c9:64:
d3:c0:4a:87:42:e8:fb:a5:4b:1c:30:1d:cc:d9:da:64:69:f5:
fc:18:bc:66:be:bd:a7:67:0f:46:c5:26:24:84:be:a5:fd:7b:
6c:2b:cf:f6:fa:28:8a:2d:02:fa:ec:da:fc:b2:6b:2f:29:38:
dc:52:a1:87:fe:76:f7:1d:a8:c4:f9:5a:9d:8d:85:12:44:d4:
04:fb:a0:93:ce:a5:36:83:32:43:29:7a:d3:68:dd:1d:e5:5b:
ac:04:b2:70:d1:e2:e6:9b:5a:e6:c2:30:1a:8e:68:f4:64:70:
7d:4b:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:56 2025 by rpki-client