Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28725948-5c00-3aad-9603-850273818624.roa
File: 28725948-5c00-3aad-9603-850273818624.roa (raw, json)
Hash identifier: rEHk/vGmmLtXkSIuE2q7NVt5pKMVStlwecLHGmhu5cM=
Subject key identifier: 7D:7B:C7:8F:D4:17:E7:4D:93:AF:20:A8:79:3D:C1:BB:F4:9D:58:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1052777D42E8EB6C5D80A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28725948-5c00-3aad-9603-850273818624.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 98.33.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:52:77:7d:42:e8:eb:6c:5d:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5fb6293e-ecbf-457b-87b6-0824a8a368f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:8f:86:ea:47:24:48:c2:c5:10:7a:e4:3d:
9b:74:c3:38:f1:4d:fc:71:ff:5b:fb:d8:1f:22:0e:
c4:2e:6f:0c:61:da:51:92:70:50:6b:fb:92:d2:a1:
90:ae:70:ea:70:a1:d3:c6:37:25:3f:2b:32:6d:ec:
5c:76:c9:ec:b7:ee:1e:32:12:c5:6d:a2:51:be:59:
19:39:a0:cb:07:82:b9:76:68:30:5b:f5:fa:34:e1:
bd:bd:ec:21:2d:86:7c:76:cb:4a:9d:36:0f:af:97:
f4:82:d6:7d:bf:7b:ad:68:12:1d:5e:1b:2b:20:13:
02:be:06:3f:8e:a4:73:41:82:85:59:96:ac:b7:78:
da:59:09:93:a7:b7:6f:b6:66:ad:1a:ea:f0:e1:57:
dc:18:d4:16:07:fc:ef:20:99:af:75:4b:20:79:1e:
82:73:40:61:c2:a3:c6:a0:5d:22:b7:e3:82:ce:29:
a7:b5:bf:21:fd:f1:15:07:e7:de:9b:fa:9b:ef:93:
9c:5e:e6:7e:37:75:68:1b:fb:9f:66:8d:86:34:9c:
42:83:04:d7:06:62:a7:c7:2e:e7:f2:f9:e5:e5:97:
b3:36:5a:c7:5b:7d:1b:56:e6:ac:4f:e5:6f:e3:bd:
67:fd:a3:33:e2:3c:e9:d8:c6:6c:b5:04:55:f5:cf:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:C7:8F:D4:17:E7:4D:93:AF:20:A8:79:3D:C1:BB:F4:9D:58:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28725948-5c00-3aad-9603-850273818624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:42:af:da:cd:e0:8a:de:5e:b4:32:ae:67:da:04:44:28:55:
fd:68:25:4f:12:94:e5:fe:5a:b6:b7:27:e3:e5:60:cc:75:e0:
8e:19:74:8b:cc:ca:56:2b:a2:bd:bd:28:1d:c8:7b:53:e1:9a:
b4:1e:61:c4:c0:b8:52:f0:df:9c:77:e2:a8:24:43:bc:53:56:
47:47:19:b1:53:23:17:1f:40:0a:16:1b:b9:be:7d:78:9b:21:
66:70:7c:74:03:56:45:d4:31:17:5b:ae:b3:ef:63:36:89:b6:
5c:65:18:29:04:1e:bc:47:e0:bd:16:a3:4d:eb:79:44:cf:56:
6d:ad:da:ec:a4:e0:50:c7:b8:03:e9:96:14:75:03:1a:57:d5:
2c:f2:e1:0f:2b:02:ef:9a:96:93:2c:67:ad:b9:2a:96:1e:07:
82:d9:1b:32:2c:fa:61:ac:78:56:a3:81:f2:69:29:e1:c2:af:
db:a2:ab:81:53:91:de:83:33:68:13:d7:a6:12:69:6f:3d:90:
84:28:fa:18:61:ae:dc:a6:e1:3f:47:73:dc:c1:8d:34:70:5a:
ed:6b:c7:c0:dd:7b:7d:ed:38:17:11:b9:9f:4a:f1:2c:dc:b0:
ba:ae:36:d6:c1:40:13:b1:84:99:fe:49:e7:fd:89:da:89:b4:
ae:71:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:18 2025 by rpki-client