Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e198a5f-f8db-3f63-98e1-c0516dece1ab.roa
File: 1e198a5f-f8db-3f63-98e1-c0516dece1ab.roa (raw, json)
Hash identifier: lSgtQX3+Dyr7/QzTlBGsi3MA38mBuJPaWCwjDm5JgYQ=
Subject key identifier: F8:E5:7A:B6:9E:4E:A6:11:C5:81:51:45:B8:B4:01:3F:20:5A:38:D3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C115F4F93D13BCB24530080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e198a5f-f8db-3f63-98e1-c0516dece1ab.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.226.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:5f:4f:93:d1:3b:cb:24:53:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a98cea33-5fdc-4396-8fbf-5faf1ea2047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:cb:f2:a7:9a:65:c1:72:a8:99:98:ac:85:
47:29:27:f5:9a:b4:f6:64:97:be:73:e9:4a:cf:7d:
6b:a5:19:5b:04:cb:2c:e7:6d:26:b7:8b:56:ff:bc:
e1:35:3c:8f:c9:1d:7b:e4:70:27:0f:84:c2:15:4a:
51:6f:60:96:95:6c:4f:96:b9:55:36:c0:fd:cf:ac:
cc:90:43:bd:b9:83:92:aa:39:49:bb:54:fb:05:11:
eb:c4:a4:01:44:9c:61:0f:94:9b:0b:09:d5:26:7d:
ab:f2:11:61:f1:21:4a:d1:92:f9:77:e3:93:92:35:
a5:cf:7e:d7:27:93:0c:cc:77:af:c4:f5:5f:4f:ab:
c3:cf:9e:43:e3:c1:46:80:0f:90:2f:db:fa:e7:b5:
96:08:b8:a7:2c:d2:fd:ca:05:f2:6d:19:a9:c8:19:
72:24:bf:f1:a2:5c:43:16:c6:7c:38:4f:d5:20:9d:
c0:95:9f:3b:50:78:97:8e:c5:61:00:27:ce:3e:2f:
fa:59:ec:2a:82:58:14:c4:e6:fc:d7:3d:14:e0:76:
4b:eb:d2:80:5d:0b:b3:96:96:51:4e:d8:72:55:b6:
76:5d:ce:55:1a:95:4b:c0:e7:20:d9:fd:12:d9:a9:
c2:c6:86:d8:80:bd:9c:3c:10:40:d5:2f:a0:d0:48:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:7A:B6:9E:4E:A6:11:C5:81:51:45:B8:B4:01:3F:20:5A:38:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e198a5f-f8db-3f63-98e1-c0516dece1ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.226.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:09:f1:e2:97:0c:ec:43:56:74:0a:a7:29:d0:e3:fc:f5:15:
53:cb:1c:67:c9:f6:bc:a3:5f:43:8f:12:c3:19:be:9a:b2:55:
87:53:86:4d:5a:6c:91:1e:d7:f6:bb:61:f4:ce:01:23:0e:d0:
67:42:c5:d6:8c:67:41:3a:db:b9:de:a6:3f:73:fe:cc:f5:9b:
9e:eb:5e:58:bd:ee:9d:db:ef:86:45:24:b6:57:4b:a3:7d:22:
1d:bf:35:70:82:8d:4e:ed:ac:8d:62:7a:e0:f4:81:10:1a:08:
64:f6:cf:74:66:4a:84:70:27:0e:e3:8c:fb:b1:6c:89:20:cf:
e8:e3:5d:54:af:15:88:bf:03:35:5c:47:38:f3:c6:dd:e3:1f:
c2:12:ff:05:24:dd:dc:96:83:23:5f:c5:8a:c1:fd:13:bf:f4:
eb:d8:53:c5:8c:0c:73:d9:f7:11:1f:41:47:38:23:be:20:13:
90:f0:ba:cb:92:39:e3:be:57:f5:0d:e4:9b:e6:74:22:03:60:
99:0a:e6:4f:18:90:5d:4d:58:0d:0c:0e:28:5a:9e:6d:47:7d:
1a:06:7e:ea:fb:d8:cc:39:63:20:aa:bc:f9:dc:b4:4a:51:a1:
a3:6d:a9:6e:80:e2:f2:42:6b:0c:61:fe:2e:2c:a3:ba:27:d0:
14:fc:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:07 2025 by rpki-client