Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fbc8c8e-bf1f-39f6-91c9-b19e912f1dd5.roa
File: 3fbc8c8e-bf1f-39f6-91c9-b19e912f1dd5.roa (raw, json)
Hash identifier: GHx1j/YMqBqou+huFGBIv/9z8S9sSoGtBAnPAVTcxyM=
Subject key identifier: A5:66:FC:A2:0E:B6:39:BB:EB:BC:E4:E6:2A:67:F5:A9:66:8F:0D:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CA8510BDA8521D55BF680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fbc8c8e-bf1f-39f6-91c9-b19e912f1dd5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.34.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:a8:51:0b:da:85:21:d5:5b:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=db988ed1-39d0-4ffd-8f3d-521905834f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:66:18:ce:ea:75:bb:eb:f7:3b:f4:9f:eb:
29:2e:fa:f2:e5:23:36:25:2e:43:b8:c4:60:b2:18:
01:32:4b:b6:07:85:8e:1b:dd:8b:1e:c1:df:68:79:
1e:d7:f1:2f:67:01:25:e0:79:f2:ed:97:f3:e1:84:
16:ae:f8:3a:42:c5:bf:e1:29:75:03:03:81:2c:ee:
f8:d4:b6:b0:04:e6:45:e5:79:ff:08:4c:0a:be:66:
57:d9:17:e0:db:95:6c:3e:1a:4c:50:b0:1e:5a:fc:
1e:53:a0:ca:d6:58:f7:ef:7a:23:9a:87:ef:bf:d3:
9d:b2:5e:bd:8f:2c:6f:50:27:14:a0:99:54:fc:a4:
d3:c8:2e:9e:8e:fd:08:19:37:d8:2c:cf:0a:64:05:
1b:3f:86:cd:73:e9:b7:c2:13:07:88:f5:80:1c:03:
42:7f:6a:29:43:8e:bc:66:0c:f1:ca:ab:3e:c8:a6:
34:2c:0f:14:0b:d5:c1:ed:3e:38:82:cf:31:ee:48:
e7:96:a5:b2:2d:30:9c:fb:d1:d4:68:1a:e7:a2:87:
b2:74:26:6b:fd:40:77:90:44:32:b4:6d:72:48:ad:
74:ac:e0:1d:ae:7b:4f:75:07:c3:68:af:61:19:56:
ee:46:54:f1:9a:43:10:2e:00:32:0e:66:17:a5:f4:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:FC:A2:0E:B6:39:BB:EB:BC:E4:E6:2A:67:F5:A9:66:8F:0D:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fbc8c8e-bf1f-39f6-91c9-b19e912f1dd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:4b:1a:8d:54:1a:1d:f1:63:89:f1:00:77:eb:0b:73:6a:29:
27:cd:c5:c2:a8:02:51:03:02:0d:cc:92:bf:3e:24:d1:10:57:
dd:5b:ef:21:1c:64:2f:a3:25:ac:11:3c:e8:8b:64:17:65:41:
a3:05:11:a1:6b:6a:92:52:b5:55:c3:82:26:be:28:5b:47:f0:
05:57:63:52:e4:84:7e:93:f7:d0:2c:1d:25:35:b3:51:58:0e:
cb:08:25:b1:f9:bc:d8:ed:e0:ff:a4:75:a7:3c:8a:ed:b5:58:
56:f6:66:ec:c5:c2:f4:e2:a3:c8:c6:78:50:fc:68:23:6b:83:
a4:9a:4a:ec:93:e2:55:24:93:a3:54:03:74:c6:c9:36:7c:f3:
b6:06:33:03:fd:26:5a:fa:0e:ed:37:2c:f8:bc:be:42:b4:6a:
39:71:bb:06:94:98:ea:6a:14:70:98:ed:03:c3:a4:81:0a:eb:
29:4f:2e:26:20:41:a3:28:af:2b:1e:47:8b:05:a0:8e:3a:00:
af:25:59:60:c8:84:6f:75:84:b6:55:fd:96:30:3c:a3:99:e4:
b9:ce:ee:44:00:45:e1:b1:32:31:50:c0:a5:e2:3e:83:cb:b4:
34:a7:24:3a:8d:ca:00:72:b9:20:bf:62:52:93:a7:2f:c2:d3:
3b:9f:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:31 2025 by rpki-client