Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6098c2b7-f60b-3f08-a73e-7a0e0e53203e.roa
File: 6098c2b7-f60b-3f08-a73e-7a0e0e53203e.roa (raw, json)
Hash identifier: 4ofF5AkZYQP7WN7avErcvxePxuO2Swy2ygJH++WM+Mc=
Subject key identifier: 92:DD:80:8B:3B:28:98:8C:B4:BF:C4:8A:54:BD:BF:8C:1D:C6:40:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1303B3A6334DEA42F73F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6098c2b7-f60b-3f08-a73e-7a0e0e53203e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.222.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:03:b3:a6:33:4d:ea:42:f7:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c3746b8a-ed78-403a-9adb-5a205e2e0534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:aa:38:fd:6e:01:75:50:4d:c8:16:38:62:
47:61:cd:08:80:39:d9:1d:cd:63:a0:70:63:6d:5d:
cf:27:e7:34:68:c4:7b:2a:e7:f2:b5:9b:0b:e0:af:
7b:c4:e2:e3:8f:a3:70:85:90:06:df:ed:5b:76:ca:
34:d9:da:b8:95:2c:98:f9:60:e3:03:1a:22:62:0b:
f7:f7:be:68:d6:d6:fc:cc:c6:0e:5e:a1:6d:bd:37:
91:60:fe:53:52:44:aa:21:7c:40:02:75:0c:0a:66:
fa:8a:04:00:5d:ae:50:92:70:77:23:5f:4b:4e:c5:
5a:e7:f8:27:fb:7c:0b:bf:d3:ec:fa:8f:69:79:eb:
79:13:9d:94:f1:91:0c:0f:84:df:95:59:e3:ad:f0:
41:8e:94:fa:6d:51:b6:d0:2d:da:fa:c7:8e:15:4e:
35:bd:90:9d:e3:68:09:f9:cd:c6:12:c3:57:42:ff:
6f:63:36:70:ac:f0:9d:44:63:89:50:2c:85:06:75:
9f:3d:e3:df:a4:4d:b7:e2:99:cf:fb:db:ca:cb:45:
08:57:7a:98:86:6d:d7:45:38:ab:6f:61:66:f7:1c:
cb:a6:be:d3:89:f3:20:44:a4:93:1a:20:b2:a4:a1:
aa:95:6f:c3:61:30:f5:19:1f:46:00:2b:56:73:41:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:80:8B:3B:28:98:8C:B4:BF:C4:8A:54:BD:BF:8C:1D:C6:40:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6098c2b7-f60b-3f08-a73e-7a0e0e53203e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d1:4a:63:93:4c:a3:a5:14:40:fb:62:84:36:25:00:39:ac:
00:92:af:c9:d8:0f:a2:c5:b2:b9:44:7e:96:18:fd:d1:ab:b3:
6f:ad:8a:d5:18:98:98:70:f0:99:29:e8:a8:6e:14:22:7e:6d:
fd:13:e5:31:91:e0:2c:af:70:60:02:da:9c:54:95:4b:4a:87:
4c:15:19:f4:d3:67:af:50:0d:dc:48:65:bf:75:c6:ae:41:81:
b5:39:97:ea:32:05:77:17:75:fa:04:48:88:96:3c:e7:6f:25:
ac:8a:4e:39:32:cb:66:e3:02:1b:91:a2:d0:86:47:73:e4:94:
40:ce:67:e9:e6:4a:b0:d2:91:be:8c:60:cc:43:6e:e6:15:55:
7f:57:6b:9f:0f:5f:42:d9:61:ef:e4:b4:7a:0f:37:1a:02:4e:
f1:fd:8f:a4:46:6f:05:29:ca:f4:21:f5:46:4c:7c:12:47:b7:
6c:a7:87:7d:a6:94:9f:42:2f:ea:93:06:a8:1b:aa:ff:d6:c7:
e5:bf:55:02:41:4b:2e:e6:cb:99:fa:76:3e:13:15:9e:98:22:
bd:82:bc:ca:6f:7b:cb:6b:34:91:06:68:75:41:6c:ce:32:88:
66:be:07:f6:1c:b8:5b:f4:69:64:fa:e8:8d:08:85:4e:7d:97:
6e:19:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:54 2025 by rpki-client