Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/414d382b-9ae4-38c4-83d1-429a41ca1769.roa
File: 414d382b-9ae4-38c4-83d1-429a41ca1769.roa (raw, json)
Hash identifier: H0hnNNet7osFuwGXjSfhLWh9eAbB5znZrQKAwSeKAr4=
Subject key identifier: 8A:A2:21:7B:0C:0A:AC:64:E0:BB:5F:10:6E:84:1F:E6:E0:8C:B5:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130F826AF94E78B30CA300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/414d382b-9ae4-38c4-83d1-429a41ca1769.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.52.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:0f:82:6a:f9:4e:78:b3:0c:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b9ab6f4d-fd3d-4590-8d4c-152e9f3d7a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:dc:d2:6e:af:4a:74:be:ef:d7:f2:0e:8e:
78:a0:7b:6f:7f:68:88:36:40:b6:e3:55:15:60:48:
f4:cc:7b:ef:57:61:97:39:65:cd:fd:88:be:36:16:
4f:90:19:c1:38:5b:6d:d1:78:54:ee:0d:ce:36:d7:
09:5d:e7:a8:2a:56:c8:95:9b:e0:31:b5:3f:8c:56:
0a:9a:14:bf:41:6c:e4:74:fb:6f:36:27:ef:28:40:
c1:cb:f2:8e:3b:61:9c:12:ea:42:33:88:ab:a6:b0:
d5:66:51:1e:fa:80:33:a5:f5:a2:f9:2d:32:f0:e4:
66:83:3b:71:7a:77:69:56:2d:57:ac:e9:1b:bd:76:
8a:29:5d:a4:26:e2:c9:62:41:ea:23:97:b7:1d:e9:
55:ae:5b:3d:e7:0c:9a:1e:0f:af:5c:f8:13:a9:ff:
70:e2:7a:71:97:5d:cc:9a:6f:a0:8b:69:b4:48:49:
77:2d:92:c5:c6:06:41:ba:d9:41:35:17:1d:f3:66:
df:48:e4:dd:00:5d:cf:cd:38:c0:41:38:60:ad:e3:
d0:3a:3c:46:ec:6e:47:ce:26:24:aa:e7:26:fa:0f:
c2:b6:b1:18:2c:4e:a0:63:0e:ce:88:12:80:ed:54:
f4:97:92:0b:4e:d6:b7:32:ff:a1:00:bc:25:5d:c7:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A2:21:7B:0C:0A:AC:64:E0:BB:5F:10:6E:84:1F:E6:E0:8C:B5:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/414d382b-9ae4-38c4-83d1-429a41ca1769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.52.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:72:8b:d7:5b:98:0a:9c:cd:c3:b7:c6:fe:67:d2:b1:89:c4:
77:13:51:73:6c:40:5f:f0:51:46:ff:4b:38:83:b2:2a:7a:50:
cb:ec:12:7d:d5:5d:fa:d5:31:eb:af:85:72:58:ad:75:a1:56:
d5:fe:7e:5f:e1:72:26:e0:d2:97:b2:cf:63:7a:4d:76:0f:62:
9e:bc:47:dd:38:b8:cf:1a:f5:7e:ee:15:70:0c:51:54:69:db:
d1:d5:0a:2d:82:ee:d3:39:2e:09:46:ce:a7:c8:fa:4e:03:3f:
99:1c:1f:31:93:a0:0f:29:10:ac:87:ca:78:56:83:6b:18:1a:
fb:6b:28:f6:65:ce:5b:52:dc:97:0f:b2:66:67:f1:29:09:9c:
98:72:cb:f6:79:f0:1b:93:f3:ca:fd:bd:86:0c:79:10:aa:35:
61:88:40:97:20:4b:55:a8:4f:79:53:b1:b2:45:61:83:9a:7a:
06:e8:6d:de:34:03:d6:ea:de:81:13:c0:58:8b:59:4f:6b:35:
58:dc:cb:41:c3:de:6e:6a:30:b5:0f:b8:15:f4:1f:78:10:9d:
dd:01:83:7f:73:2b:13:8d:29:82:23:0c:c9:dd:02:8a:4e:c2:
39:63:3f:35:b0:f2:ee:aa:d3:d9:1a:37:f8:f8:26:b8:01:66:
39:bb:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:37:41 2025 by rpki-client