Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/430f0020-0e52-35d3-acab-8de792879f09.roa
File: 430f0020-0e52-35d3-acab-8de792879f09.roa (raw, json)
Hash identifier: 5bn2IILyzm67iVIAOVRw11ksxUiYXaXmjf7lCvVDgjI=
Subject key identifier: F8:C7:A7:A2:70:8B:96:5B:63:1A:C9:EE:25:C4:84:73:87:7B:82:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814406A1B93CFC921C828A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/430f0020-0e52-35d3-acab-8de792879f09.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.199.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:6a:1b:93:cf:c9:21:c8:28:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a9e80ad4-e4aa-48e9-99a3-5bee78ee66d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:32:ff:2e:80:b2:f0:04:5d:2b:c2:81:85:
7f:c1:c9:b5:8e:67:4d:0b:84:3f:84:2d:cb:09:c8:
66:4f:fc:b8:78:3f:7a:8e:24:79:c6:56:eb:13:3e:
ce:d2:c4:ba:49:bb:4c:a5:b1:f1:d3:1e:1b:93:4b:
c5:e7:b8:cb:3c:b4:9a:48:70:d3:ff:92:6a:64:d9:
c9:5d:23:bc:7a:f8:73:fd:70:58:04:0c:74:f1:e5:
63:44:c5:04:70:09:a4:9e:4c:96:cf:60:39:ef:2a:
9e:1e:35:b8:cd:48:72:0e:e6:4c:00:46:d3:91:d7:
0a:80:42:67:cb:06:7c:9b:93:80:7b:32:1a:c5:b1:
b2:a5:04:97:0b:c0:98:3b:d1:db:32:98:ea:05:ab:
b4:f3:21:12:df:10:2e:e7:9c:5d:47:07:ff:eb:07:
e2:5d:ae:2c:11:b6:d0:d3:04:e4:ad:af:87:7e:fe:
4f:a5:12:4c:35:92:58:3a:70:d0:35:4f:32:7c:ae:
a8:17:b9:e2:05:28:3c:cb:21:5d:55:68:d8:05:db:
96:b4:ee:63:38:a5:a0:7b:cc:89:f5:d7:6b:09:83:
7a:43:7b:27:3e:75:e0:c0:a1:5a:9d:b5:5e:8b:49:
c7:9b:1d:4e:c9:dd:a7:b0:9b:d1:3c:46:b5:03:f8:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:A7:A2:70:8B:96:5B:63:1A:C9:EE:25:C4:84:73:87:7B:82:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/430f0020-0e52-35d3-acab-8de792879f09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.199.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:6d:22:95:76:1f:bf:c2:74:4a:f6:b9:94:d2:ae:69:16:b2:
90:dd:d7:a3:b6:f9:cf:4d:55:72:a1:e2:07:bc:6f:8a:e2:f7:
1d:86:3e:8f:50:73:30:f3:ac:2d:13:84:f7:b9:de:09:58:b2:
0f:e7:ac:fc:43:c1:18:63:2e:f3:4b:cf:87:11:5b:1a:4e:12:
04:e6:46:4a:fd:f4:77:56:34:a2:2c:3d:4e:62:7b:41:7a:2e:
86:3b:85:95:73:fc:0f:bc:15:7a:c3:8f:f0:84:b8:b7:44:7d:
8b:e2:0c:64:5b:dd:c5:28:91:03:95:e8:82:09:03:f3:ad:04:
77:d8:fd:a1:1e:6a:b8:90:bf:69:97:59:70:a9:de:9f:bb:b9:
a0:6c:47:db:ea:96:2d:b0:17:b4:2d:a4:82:08:91:fc:a9:d9:
80:9d:a6:86:5e:a5:1f:9d:52:81:d0:ad:a5:a5:28:b1:9d:1f:
0f:41:10:60:78:d4:99:01:a0:62:ac:22:cc:32:6a:19:cc:f1:
8e:c9:f9:9e:02:f3:1c:6d:55:3e:8d:ae:d1:40:49:a8:d6:11:
01:65:2f:6f:6c:ef:d2:d0:27:2b:63:ab:25:ad:27:0e:83:e4:
11:44:9b:ac:fa:26:63:05:ce:cc:2b:e7:29:29:e3:d9:5a:9e:
6a:2c:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:38 2025 by rpki-client