Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbbec7a-dd56-3c8e-acc3-a1565e34a11b.roa
File: 0bbbec7a-dd56-3c8e-acc3-a1565e34a11b.roa (raw, json)
Hash identifier: yIvYu61NhH3P7lP/WYIubtYZJHft3pgJPJJDPDoqf+8=
Subject key identifier: 3B:86:44:78:A2:B7:F2:8C:0B:E7:C0:2A:25:50:3C:CC:89:36:B4:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10B403F26E970DE8ED0400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbbec7a-dd56-3c8e-acc3-a1565e34a11b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 76.98.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:b4:03:f2:6e:97:0d:e8:ed:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=30453014-cb81-4014-abab-99464f18855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:d2:07:52:74:76:4c:57:b4:4f:1b:3e:0e:
ad:6e:df:f9:c4:57:fa:8f:97:36:85:30:8f:16:4c:
ff:0b:4e:86:2f:16:f2:fc:bf:32:84:23:c8:1f:55:
4d:54:c1:e7:ab:ac:75:3b:4c:bf:35:54:2b:4a:6e:
91:8a:ef:ce:0c:60:f2:61:e9:4d:ba:f5:75:a8:96:
7b:55:f1:91:5a:f1:64:87:a9:26:e8:4e:09:19:d5:
1d:31:64:d2:d4:31:a3:f3:d6:96:a7:c3:b7:31:0c:
c7:a9:7f:e0:78:67:2a:3e:b9:6d:91:05:52:46:6a:
c2:c8:48:e7:d5:a0:4a:51:69:45:d0:6d:ab:4a:ef:
ad:ad:bf:cc:a2:63:58:5d:e2:95:4a:c1:92:86:f5:
24:82:dd:0e:74:32:ac:c2:62:02:92:16:3f:ed:63:
ed:34:de:4e:d2:8c:7b:70:ce:cb:0a:db:06:38:13:
f8:04:9b:c8:3c:3d:cd:a4:b8:b9:df:b9:78:ac:73:
3e:88:6c:1c:cc:2b:11:15:c4:6b:9d:db:db:69:76:
08:21:68:d5:0c:82:ec:21:f1:c0:48:90:24:32:f7:
7c:20:31:e4:d3:b6:c4:e1:de:58:cf:38:8c:02:0a:
91:ec:7d:44:03:2e:75:cc:c5:f4:0c:e9:35:63:55:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:44:78:A2:B7:F2:8C:0B:E7:C0:2A:25:50:3C:CC:89:36:B4:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbbec7a-dd56-3c8e-acc3-a1565e34a11b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.98.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a2:3a:e0:a2:0b:7b:5c:16:94:0c:12:29:02:5c:34:93:92:
b9:0e:07:4e:04:a7:08:ff:4e:32:03:8e:49:f3:c0:42:3b:a1:
3d:31:ed:53:22:5e:44:0f:31:9e:f5:a5:f6:8e:b9:46:a2:a0:
25:fa:1d:6f:54:5e:c5:04:4a:91:19:3d:86:5e:56:59:db:ea:
07:8e:a9:b3:23:72:c5:a5:f8:58:42:1f:de:a5:bb:04:8c:f4:
78:be:80:00:bd:a5:9d:da:2b:81:23:b2:0b:63:fe:23:b3:97:
7b:ee:90:22:d6:90:24:73:bf:6e:9a:5b:f8:99:01:ac:ba:4c:
81:55:13:10:c0:d1:7a:01:67:94:61:4f:08:10:cd:8d:a6:42:
0f:da:cf:d6:67:b8:46:ec:11:66:f5:c4:9a:da:83:59:ff:b0:
56:dc:c0:4f:33:3c:6d:87:56:8e:7c:fb:96:ec:96:78:15:f4:
22:25:57:10:f6:ab:92:ac:9a:92:bd:ca:11:d9:03:35:4c:0e:
6e:cc:8b:45:ba:99:42:63:a4:99:17:53:04:27:ad:d8:54:8f:
26:05:39:da:3f:ad:c3:e8:8e:b3:4d:02:38:06:31:bc:f7:bf:
6c:d2:89:db:2b:66:77:10:99:c2:82:e6:ab:a3:ad:8f:ee:de:
24:34:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:18 2025 by rpki-client