Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fee9a6-565b-3a0f-a7e8-48ac643dfdd6.roa
File: 30fee9a6-565b-3a0f-a7e8-48ac643dfdd6.roa (raw, json)
Hash identifier: 45n7U4goUaFE3xtAkk52o2Ola/JB6a96fEaU3/nT9Qc=
Subject key identifier: 42:0F:BD:05:9C:C8:39:4E:73:8A:2B:24:A7:9A:9B:EE:34:2C:68:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814408CAF8CF09C2448955380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fee9a6-565b-3a0f-a7e8-48ac643dfdd6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.40.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:8c:af:8c:f0:9c:24:48:95:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=da6f3673-2b8b-4c00-9d71-32436c293521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:7c:f7:60:c0:b6:75:a0:2e:6e:d5:58:51:
8d:93:19:af:8f:25:28:ec:73:47:04:f9:3f:ab:8e:
7b:e8:9d:51:52:65:07:eb:c1:11:e3:5b:62:0d:76:
16:1f:24:19:a7:fd:5f:93:f7:eb:3b:21:4e:7f:90:
d8:fd:5b:3d:25:b5:f8:58:ce:4c:be:34:6b:16:8f:
d2:26:df:75:f2:2b:5d:75:86:95:20:db:bd:5f:97:
2f:c9:8c:48:54:52:e3:52:dd:45:f6:4f:48:9c:10:
5c:c6:8a:ed:f4:a1:91:5c:56:d1:fe:1e:2b:41:a6:
60:9a:b3:ce:e2:be:ca:65:8d:63:53:95:24:b9:96:
91:df:9a:98:02:11:cb:ef:46:c2:6b:36:b1:ca:40:
6a:2d:00:25:88:87:07:c3:04:cc:bc:d7:10:c2:d9:
e7:9b:eb:8a:3e:12:8c:b7:01:81:92:9e:96:5d:ca:
7f:ee:a0:43:f0:d8:b4:90:cf:e8:d9:6a:ce:e0:7a:
dd:ec:a1:71:d8:b8:18:be:82:20:18:ae:68:1a:13:
d1:d8:36:f7:46:4b:0f:53:03:37:a4:0a:1a:7b:09:
89:91:59:ed:4c:55:7d:48:ac:2b:e4:1f:cc:4e:af:
10:5f:0e:6c:c4:ba:c6:a5:15:f8:c2:bc:1a:e1:2e:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:BD:05:9C:C8:39:4E:73:8A:2B:24:A7:9A:9B:EE:34:2C:68:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fee9a6-565b-3a0f-a7e8-48ac643dfdd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.40.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:3c:db:2f:32:b4:00:12:29:fb:a4:a0:d7:46:5d:27:a4:42:
d6:f9:68:c3:a1:5d:73:d4:76:bf:f8:fa:ba:03:60:18:ff:bc:
12:2a:30:cd:a7:39:e3:4c:fe:90:13:99:76:73:0f:e5:54:02:
8c:27:e7:42:65:61:25:ad:df:67:1e:9f:a2:eb:01:de:6e:c5:
c6:1f:7d:a1:62:0e:0f:a7:31:85:d6:64:7d:03:fd:52:cc:51:
74:b5:85:ba:b7:06:b8:e3:7e:c8:19:e8:50:3f:a2:be:19:21:
f5:e1:2e:76:1c:28:54:85:69:bc:ea:0f:bc:84:07:6d:9b:ff:
0e:3f:c2:39:b4:6e:5d:54:73:0e:7e:e0:57:24:d3:50:5b:85:
9c:1f:15:02:23:c8:c7:45:43:26:6a:07:88:be:92:90:83:bd:
a7:29:c1:d1:dc:d9:b3:c2:98:d5:0b:61:2b:8e:5c:92:6c:7c:
26:5f:d9:21:9c:b1:a2:64:59:c0:c9:82:5a:84:5d:19:73:2d:
f3:26:87:32:23:7b:c2:7d:91:1b:a5:6f:ea:1d:f9:57:02:d9:
44:32:47:b2:26:4d:a2:d1:51:05:f5:4a:b8:29:c4:7b:1f:e3:
c3:5e:c6:1d:09:03:4e:24:b8:6f:ea:39:4d:c2:ac:c0:43:02:
2f:52:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:46 2025 by rpki-client