Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e9e34e3-67db-3e6b-84ec-30f658fcc1a2.roa
File: 2e9e34e3-67db-3e6b-84ec-30f658fcc1a2.roa (raw, json)
Hash identifier: IySZDrPQxHLqCw8HLI+1cSzJspWZihqqAgVTAEVuikg=
Subject key identifier: AC:88:1A:27:90:00:2C:B2:20:42:3A:00:EC:48:7F:76:AE:CC:0D:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12571986796AC1D68B7580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e9e34e3-67db-3e6b-84ec-30f658fcc1a2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 76.98.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:57:19:86:79:6a:c1:d6:8b:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=836ce4af-97fe-4636-95a2-f1baff8fcfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:13:f2:fa:c2:be:1e:43:0e:f1:c7:a0:33:
3b:3f:ff:33:6e:95:2f:40:55:a8:92:68:05:d4:fb:
51:18:63:47:03:2b:ff:3d:d9:2d:25:a8:1f:a7:2c:
78:3e:d3:11:2f:a6:10:15:0f:ea:51:f3:8d:28:7f:
7b:a1:06:0d:ed:1a:5d:be:f6:bc:9d:d5:85:be:e7:
7d:9a:6e:be:49:e7:a4:58:4a:19:df:92:a0:6c:6b:
1e:1e:e4:6e:92:3c:89:89:7a:94:cd:4b:12:84:43:
33:38:1b:19:4e:0e:1a:33:ec:be:93:10:d2:be:10:
1c:a7:5e:d0:6b:71:7a:29:e9:8e:ba:f6:a4:35:f8:
f2:12:23:56:67:fd:a2:eb:b9:fc:63:3d:ba:a8:eb:
d9:3e:c8:b5:67:69:fc:45:a5:25:e7:73:49:10:5b:
71:16:ce:3d:2a:3b:a6:6d:20:96:40:ca:8f:c4:9b:
58:1d:81:f0:c0:b5:d2:39:92:9c:1c:7d:c3:40:97:
ed:8a:f7:28:22:3d:08:d1:92:89:0d:22:77:02:53:
36:2e:4f:7b:66:bf:d9:80:a0:52:01:d3:bb:ae:b1:
91:71:f6:23:e3:94:4a:62:bf:14:8e:e1:a0:8b:6d:
94:e6:2c:89:e3:5e:1d:ed:15:25:72:06:4b:ba:09:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:1A:27:90:00:2C:B2:20:42:3A:00:EC:48:7F:76:AE:CC:0D:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e9e34e3-67db-3e6b-84ec-30f658fcc1a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.98.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:8d:07:4d:d2:b0:c6:ad:03:e8:9a:cd:02:6a:8e:45:fe:ce:
22:2a:dd:ed:77:bb:5b:7c:0b:82:be:45:a5:16:87:44:ec:1b:
1e:d5:b1:4d:ef:5d:a8:c0:f9:fc:b2:30:95:65:23:b8:65:47:
b9:55:5e:0e:71:21:1a:5a:a9:53:6f:c0:37:97:3a:e2:b6:86:
a9:7e:fa:0f:80:86:63:79:99:e7:98:c0:87:d1:71:a1:17:7a:
c5:22:8f:ce:65:ed:9e:47:5d:b3:d1:8e:77:3b:b0:65:9d:4f:
f8:dd:5a:7a:97:87:c5:06:ad:bf:7c:2a:a9:96:fc:99:6a:e8:
a7:62:ad:fd:b1:a3:8a:4d:a8:5a:04:6b:35:52:6d:8d:4b:4b:
57:0b:76:be:5a:a4:ee:2e:ce:a3:fe:6c:4f:88:20:83:bb:18:
dd:32:08:d6:03:40:86:4d:d9:36:6f:77:3e:b5:4f:23:87:d1:
74:26:b5:7a:f9:b4:8a:d4:eb:53:01:6b:9b:17:65:c6:d9:89:
87:83:74:fe:ff:c5:ce:87:9d:91:1a:bd:e4:6f:bf:b5:52:b2:
fe:e7:8e:a7:54:fb:14:55:70:ea:49:10:f9:69:f6:80:48:3e:
bb:28:e2:a5:85:1f:e8:30:29:17:11:36:2c:21:80:22:e4:48:
46:45:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:25 2025 by rpki-client