Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a81afd6-80ef-38d9-99bb-d091a618a94c.roa
File: 3a81afd6-80ef-38d9-99bb-d091a618a94c.roa (raw, json)
Hash identifier: 8+2ku8CHMHdtXUDsIgBoIr85RrminfNfYExOuNQVgbw=
Subject key identifier: BB:46:52:E5:86:40:96:41:5E:D0:40:6D:24:DD:25:2F:62:8B:50:23
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144079EBF3D9AC9C02588C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a81afd6-80ef-38d9-99bb-d091a618a94c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.201.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:79:eb:f3:d9:ac:9c:02:58:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=93d76d16-ff91-4fe3-bfdd-d2a1beaa9374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:c2:1f:0a:9a:ac:6e:ef:87:21:0f:4f:67:
dc:2f:67:b5:0f:13:0a:79:a2:99:36:89:e6:bb:af:
45:3e:8a:26:42:18:94:11:da:f7:3a:ae:e7:20:8a:
a5:34:b5:16:d5:ec:90:7f:b5:0b:59:f4:fc:08:da:
49:35:87:f4:b8:cf:a6:da:c7:94:30:1a:8a:b4:38:
b4:bb:b5:81:1a:6d:cf:3e:ba:f5:5b:ab:e9:b0:d1:
10:d9:4b:fc:5c:00:e7:c6:dd:d4:2a:40:3b:96:0b:
bb:ad:07:8d:fb:e5:ea:13:15:65:20:ba:50:af:c3:
a9:ae:05:64:00:c7:62:a5:e6:31:b5:2a:32:fb:0d:
c5:39:f4:62:bc:07:86:f8:62:60:63:2b:ce:ac:2d:
25:53:2c:26:44:82:87:17:14:03:8a:56:8e:82:ad:
72:8f:05:60:15:62:d0:fa:10:82:b5:7e:6b:df:a9:
17:17:81:42:99:dc:ae:39:93:de:ce:50:71:78:05:
20:ba:cb:5a:16:b3:ca:83:0d:eb:97:93:ea:6b:6e:
60:37:3d:e0:f1:95:77:63:fe:d2:7e:a9:26:7a:de:
f7:61:ca:47:53:1d:73:6c:2f:08:f1:ab:e0:07:d8:
a8:c0:a3:cd:83:3c:74:7e:5f:f7:45:c1:33:ed:b9:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:52:E5:86:40:96:41:5E:D0:40:6D:24:DD:25:2F:62:8B:50:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a81afd6-80ef-38d9-99bb-d091a618a94c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.201.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a7:98:e0:8a:37:89:44:9f:ed:1c:73:79:db:35:ed:90:f8:
10:ad:4f:ae:59:1e:b3:ec:b0:b4:71:1a:ab:90:d8:aa:c5:df:
bc:25:aa:93:38:06:64:35:74:dc:f9:b1:c1:9f:a7:09:e3:59:
95:c1:77:83:50:c1:ea:1b:93:f7:2c:a1:46:31:26:0c:e2:de:
67:ee:ad:8e:3a:3a:74:03:17:0b:c5:ae:93:ba:19:3f:95:e6:
34:d3:b9:e5:38:44:b1:03:69:e9:47:5e:91:83:eb:f5:dd:bc:
bb:25:ba:ef:76:ac:b1:2d:b0:7b:d9:f0:86:db:93:5d:da:36:
f6:29:34:a4:35:99:0b:b2:57:73:e7:81:4e:12:e9:f7:c5:cf:
f2:8d:57:00:05:30:d0:59:d7:19:e3:6e:7d:3a:e1:6c:f1:5f:
7d:87:96:51:9e:e9:3f:fc:35:7b:e6:84:68:10:97:c8:6f:d8:
78:b5:b2:85:76:be:ac:56:c6:2f:8b:e1:a4:df:cb:42:d9:b5:
5e:38:93:c4:21:d3:0b:23:b2:90:2e:6c:bb:16:25:7a:f2:20:
ed:a1:74:ba:8a:45:70:ff:a1:85:12:91:2a:fb:e1:7c:6c:a3:
2c:bf:6a:00:06:9f:32:8d:db:c4:e7:ae:4a:26:67:96:af:55:
0b:c5:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:41 2025 by rpki-client