Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645d219a-b0fa-34a6-a1cd-e82a19decd6d.roa
File: 645d219a-b0fa-34a6-a1cd-e82a19decd6d.roa (raw, json)
Hash identifier: +FXFQu4X9f5QhruLFKPkYGWg2R/yrjR3sIsArHKRroI=
Subject key identifier: AC:F2:F0:7E:3B:C4:5F:F4:15:12:2D:FF:A2:9D:BD:78:C8:4C:1D:57
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C115D4DA944D0296CF8BFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645d219a-b0fa-34a6-a1cd-e82a19decd6d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.223.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:5d:4d:a9:44:d0:29:6c:f8:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4de2de11-61e2-4ee0-9f0f-6a2d407f96ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:c9:f5:a0:c6:48:2f:eb:e5:a1:7b:ff:6a:
e7:f8:fa:c7:54:0d:0c:16:a5:69:d6:1d:5a:48:d4:
12:3b:c9:61:40:ad:08:c5:f4:3d:fc:d0:fd:a5:64:
ee:30:eb:b5:98:e8:a8:c8:1c:e0:91:82:14:5c:8f:
64:01:cc:8b:de:f0:13:c9:96:0e:3c:09:c4:f5:ed:
39:70:ec:d4:ac:92:62:d6:0c:f9:b1:fc:63:fc:d1:
1f:23:df:15:b9:e8:cc:63:0c:07:6d:61:e1:93:be:
19:29:36:bc:3d:02:e4:81:ad:82:7b:57:04:d6:8f:
e7:c9:74:43:4b:aa:37:12:e0:fa:b4:8b:78:ed:9b:
41:c7:2e:23:4d:c6:cf:c6:22:f5:f3:fa:48:bb:45:
80:45:cf:c1:4e:c7:04:3a:d2:32:3e:4a:b3:d0:a8:
3e:b7:56:12:29:3b:89:ce:eb:c7:d6:ab:2e:b6:fb:
40:69:97:7b:0b:dc:a5:48:27:22:37:59:1b:0c:aa:
62:44:43:78:1b:5f:17:86:6a:63:f0:d6:96:d8:96:
87:8f:9a:9f:ec:5f:71:7c:ba:2f:bf:b5:e9:51:f6:
7b:23:d8:c2:65:3e:16:5b:a6:62:bf:8d:d4:ed:63:
00:1c:78:5e:9b:4a:7f:ec:81:2f:2f:c0:70:65:24:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:F0:7E:3B:C4:5F:F4:15:12:2D:FF:A2:9D:BD:78:C8:4C:1D:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645d219a-b0fa-34a6-a1cd-e82a19decd6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:e9:55:e6:da:ae:af:8e:e7:76:7b:c0:2c:33:eb:20:2f:73:
59:4b:39:68:58:76:83:ce:63:c2:68:81:b9:dc:39:eb:2e:f4:
60:4e:1c:e8:ae:3e:d4:18:94:c0:60:2e:10:26:c4:08:91:2a:
fd:d4:d5:ee:b2:16:14:82:6f:b3:8c:eb:f3:b3:48:00:e0:b6:
e7:63:43:80:1b:9b:4c:1e:6f:09:1b:d3:fd:a0:05:1e:15:90:
a7:eb:e0:03:3d:c0:0c:fc:85:4b:2c:e3:e3:6e:d2:fd:6e:c6:
9d:83:db:58:92:7a:a3:17:b2:41:1a:91:2e:d0:a5:61:0b:73:
a4:b6:11:22:15:42:99:f2:dd:bd:e6:94:d7:4f:63:f1:f4:50:
4d:af:15:64:f6:80:55:69:05:35:62:91:07:a9:0c:70:b7:72:
aa:40:8c:81:e1:54:78:a6:92:5f:f1:ab:9b:3a:f2:3f:cd:7a:
7c:ed:4a:c8:ef:cd:d6:b6:c8:6b:c6:53:9e:9f:75:60:6c:43:
1d:c4:7a:ca:15:60:eb:f8:6e:e2:17:11:81:ac:81:43:3c:8d:
5e:f5:bd:0b:1c:d7:17:24:75:d7:d1:35:a0:39:00:5d:a0:4f:
db:a6:fe:a1:bb:9b:d7:59:91:ad:0d:f8:fb:ab:9d:7e:be:36:
b7:cd:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:59 2025 by rpki-client