Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/704f2ea7-c7ba-36b3-b6fd-833f7893148d.roa
File: 704f2ea7-c7ba-36b3-b6fd-833f7893148d.roa (raw, json)
Hash identifier: KSlXuq7BEW9n6tWecnPf5MPJkQyhvQqxmyLkHGKWGOw=
Subject key identifier: 2A:A5:7C:9C:29:79:34:91:55:5D:1B:E3:EC:9E:78:01:63:A0:F1:15
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B85332A67BE070CFA1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/704f2ea7-c7ba-36b3-b6fd-833f7893148d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.250.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:85:33:2a:67:be:07:0c:fa:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b2077806-84e5-46c8-afcb-c763d990e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:71:db:48:1e:fe:e5:a2:88:53:9d:03:f9:
6f:f7:e0:a8:3d:fb:5c:1e:c4:ad:ed:fc:c6:d9:9d:
93:33:e6:d2:90:58:4f:6f:a8:ef:e1:49:a6:13:85:
7f:ec:64:49:11:4d:62:54:76:e6:61:3c:3b:bd:25:
08:47:ca:7b:af:48:2e:0a:04:3f:9d:0a:0c:8c:b4:
ca:69:de:13:9a:f1:6a:fa:d8:65:f5:34:31:98:7c:
9c:6c:c3:5f:29:3e:fb:23:5a:6b:30:bf:25:7a:c8:
2a:04:cf:01:18:04:d9:f6:a6:49:2d:24:af:1f:4a:
87:57:2a:a1:d6:b0:d0:07:d9:80:03:fe:0b:25:a6:
bf:6c:8b:1f:44:c3:03:95:3e:b0:8a:8b:ad:26:82:
20:f8:54:ad:f5:49:8c:6e:23:e9:d5:9c:a0:e3:a4:
34:8e:ea:cc:f7:59:51:dd:21:62:f4:23:b1:0b:ee:
ba:4b:67:e8:cc:c6:ca:61:ab:f5:de:85:a7:ee:d7:
02:c4:91:6a:47:b9:37:bd:ee:65:30:0e:f0:28:81:
84:4e:6c:a1:fb:1e:a2:25:a1:02:13:4e:3d:57:cf:
f3:d8:ce:b3:2c:cf:60:c7:0c:3a:92:15:17:92:d7:
c9:fe:92:c2:40:30:a0:a9:17:e3:23:2e:ea:30:fc:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:7C:9C:29:79:34:91:55:5D:1B:E3:EC:9E:78:01:63:A0:F1:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/704f2ea7-c7ba-36b3-b6fd-833f7893148d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:f8:b0:c0:82:aa:1b:5f:16:b0:09:fa:f0:b7:ae:3b:e0:0c:
f7:94:5a:b1:a7:67:14:f9:30:10:22:fc:67:fb:e1:0b:10:3b:
39:d5:5d:14:2e:2c:ea:56:1a:02:34:c4:a9:f5:db:cd:dc:72:
84:51:b4:21:a6:ca:67:0b:f0:2a:4d:ea:5e:83:a6:c3:25:65:
69:92:e5:01:30:bd:b5:63:5b:81:ab:03:2f:04:12:b1:ea:91:
e8:ad:2b:69:e3:ee:8c:bf:05:0e:d5:c6:1d:8b:51:f6:8a:76:
be:40:16:98:67:35:97:4f:57:ec:cf:f3:55:5f:30:f1:1e:93:
00:fd:dd:7c:d6:94:ba:db:2a:f0:2d:5b:0e:35:8e:86:e7:56:
61:f9:a8:c9:4e:fe:fe:a1:cf:73:82:88:12:8d:a8:a5:a4:46:
97:5a:94:9e:8d:a4:f1:4d:1e:19:9c:f6:45:11:c3:5e:1c:d5:
88:2d:9e:f7:b1:93:4b:ab:93:05:f1:2f:9e:1f:4d:87:28:bf:
ba:f4:78:e2:e8:5e:94:f9:01:f1:bb:bd:c2:2e:5a:a3:e5:0a:
34:39:88:31:1f:61:79:3c:6c:9a:c8:9a:dd:62:63:c1:4f:f8:
c7:5c:71:4b:04:a8:2a:b1:b0:e2:66:af:27:46:7c:cc:6e:03:
87:9e:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:59 2025 by rpki-client