Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c6e5645-4111-3331-9bba-3e412139442c.roa
File: 3c6e5645-4111-3331-9bba-3e412139442c.roa (raw, json)
Hash identifier: oQw/9QJ/rUl2D5OsLXQNWpz3EVk5snoD1SI7piQeAUs=
Subject key identifier: 77:A3:89:AC:8D:71:B9:3F:A0:B3:A6:B0:EE:61:B3:5F:24:CB:C7:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C131CE2E1928BB40240C580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c6e5645-4111-3331-9bba-3e412139442c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.63.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:1c:e2:e1:92:8b:b4:02:40:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1c29d464-4c58-4d93-813e-8a4988a3fbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:a9:a4:28:41:d9:7b:c8:69:d2:03:36:ac:
07:bc:9a:49:85:a6:bd:af:cb:87:ad:23:3a:82:9d:
64:e9:c1:84:54:91:9a:7f:79:2d:29:57:16:03:fe:
2f:a2:25:34:8e:ac:12:25:4b:f4:ee:c8:6b:48:53:
5a:d0:38:52:40:80:3b:c5:87:e6:7f:df:79:0a:ce:
d0:b2:74:4b:9f:5c:dc:dd:36:ff:7e:cf:07:3a:49:
2b:dd:a7:46:08:13:60:dc:c7:73:73:d9:c9:43:b4:
2f:8d:8b:54:92:a0:ad:b5:25:d7:52:09:ad:10:02:
e3:4c:79:45:d8:1c:c9:41:17:37:49:fc:1d:3d:80:
4a:d6:4d:57:dd:a6:e2:28:13:ac:b9:97:c2:99:c2:
a6:aa:0a:6f:11:c4:a3:97:bd:94:15:f4:22:23:d2:
d4:7d:25:00:bc:c6:bc:93:46:3a:24:32:a5:95:c4:
45:e4:b0:e9:dd:11:28:33:1e:20:71:b3:56:0d:24:
7b:ad:9c:a3:5d:9b:3d:e1:d4:d4:00:10:ab:63:4b:
d4:c2:7f:9f:73:f4:f8:d7:83:88:f0:15:3c:01:fa:
76:de:d1:2f:0c:68:36:8a:8d:97:b5:81:67:97:65:
a8:05:8a:06:67:dd:7b:98:60:00:f6:d6:a7:6e:e9:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:89:AC:8D:71:B9:3F:A0:B3:A6:B0:EE:61:B3:5F:24:CB:C7:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c6e5645-4111-3331-9bba-3e412139442c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.63.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:29:ff:d8:87:c7:c4:7e:f4:10:32:f9:6c:c0:17:e8:ce:cf:
46:46:13:a6:d1:17:eb:b9:92:ce:f0:8a:4d:19:c1:b3:d2:0a:
a2:fc:78:9d:32:56:0c:3a:95:80:33:15:de:9e:97:ab:46:3d:
5d:f6:e0:4b:50:34:7e:3e:d5:64:91:f2:ad:f6:25:ca:3a:35:
c4:4d:80:8f:2b:c2:df:55:e4:5f:9b:8e:96:54:fb:4a:61:f8:
a7:b4:ed:e4:d2:b2:e6:2a:1a:74:dc:46:3e:28:2f:f0:a7:2f:
43:58:71:bb:19:1d:af:e4:84:df:bd:2c:71:5b:62:b2:bc:cb:
69:61:c4:bb:ef:4a:dd:1c:07:5d:02:7f:88:a0:85:fa:83:1f:
da:c8:00:43:34:2b:f0:ad:56:02:0f:d5:67:81:26:0e:10:5a:
fc:c1:87:1e:c1:16:5f:0f:ea:dd:66:40:4b:2b:2c:8a:b7:dd:
81:84:6d:28:ff:52:83:7a:1c:73:aa:e8:39:7b:67:32:51:e0:
a9:3b:4e:e7:2a:0a:11:75:68:04:5a:b9:7a:f1:07:af:be:7e:
f1:e4:1f:55:e6:09:3d:91:1f:1f:cf:3c:29:dd:35:43:8d:81:
3c:a7:b1:02:3e:0c:2f:17:35:43:64:13:bb:3b:48:e7:f7:34:
9e:4e:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:29 2025 by rpki-client