Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ec0149c-dcdb-318e-9b02-51ee2a5ec0da.roa
File: 7ec0149c-dcdb-318e-9b02-51ee2a5ec0da.roa (raw, json)
Hash identifier: iYH0g8sFsYgMT8IcYb71qGiGVZXNYT9mSIwpaRvh1Qo=
Subject key identifier: 20:CB:AE:6B:00:B3:2E:DD:BC:10:A4:9D:B6:9A:25:A7:B0:29:AC:CA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144082ED8BC4225EAABEE080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ec0149c-dcdb-318e-9b02-51ee2a5ec0da.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.34.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:82:ed:8b:c4:22:5e:aa:be:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ce2f5f2d-a82c-4e23-8c22-fe71316e52bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:e5:de:b2:10:c7:23:9d:b2:90:29:6f:30:
9f:ce:58:74:05:b2:b1:20:16:db:08:63:6e:c5:39:
70:4c:a6:e8:bc:32:9d:f6:a0:ac:3f:30:b9:b3:17:
29:c5:af:d0:e8:f0:cd:aa:f7:ee:ac:f5:c4:20:06:
be:31:c6:f3:6f:70:be:d8:7b:dc:23:cd:1b:fd:75:
16:d2:1b:30:92:e9:69:5f:94:5b:b7:7d:2c:7e:83:
1a:25:1c:68:05:85:b5:cd:25:7a:eb:f4:e0:f9:32:
ad:06:89:42:45:d9:72:56:85:ec:32:1e:57:35:2b:
9b:a2:39:96:20:c4:7f:dd:b3:f0:d3:f8:ed:6c:5f:
ed:a2:bf:f4:c9:24:de:a1:63:6a:43:d7:3c:a3:91:
a6:9e:22:31:79:13:0b:58:ad:af:85:d5:e8:02:c1:
dc:29:ee:16:96:eb:00:25:ea:db:f4:ac:b2:4b:02:
b4:1a:e0:8c:c3:7a:ed:b3:32:02:33:cf:6b:9e:67:
11:ec:ef:47:3c:a2:ad:ed:b9:11:73:f2:c7:19:f6:
ee:ae:5d:59:8d:42:13:42:35:87:42:66:e2:88:47:
90:a9:fd:08:72:b5:d7:f4:02:61:db:be:02:d6:f2:
4a:78:76:e4:ef:74:50:3c:8d:e9:cd:51:57:5e:fb:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:AE:6B:00:B3:2E:DD:BC:10:A4:9D:B6:9A:25:A7:B0:29:AC:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ec0149c-dcdb-318e-9b02-51ee2a5ec0da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0e:5d:ce:ae:c5:53:2a:37:c4:13:c9:dd:2b:0e:a3:98:60:
08:d7:4d:b8:c9:e9:6d:28:ad:8e:fd:4d:20:27:d9:04:d4:c0:
90:c7:56:d3:9c:5c:aa:5f:44:9d:16:a2:6f:c0:fb:0c:a6:d0:
6d:90:cc:09:ba:fd:9c:6c:1a:ee:2d:de:da:2b:f7:d0:3d:e0:
95:d2:99:2d:c8:18:23:b5:90:cb:93:a5:27:4a:56:cf:19:4a:
21:24:40:9a:4d:ba:ef:26:70:0a:b9:6e:ac:d7:9f:90:20:36:
b6:42:c5:0a:9b:88:89:25:70:92:90:ba:fc:92:cb:8c:2f:0e:
7b:6e:26:b4:76:53:e9:a8:14:e8:30:62:af:d3:db:b1:f9:5c:
9f:c7:fa:f2:4f:7a:36:eb:83:70:cf:66:39:71:35:ec:b2:3f:
42:8f:95:65:a4:3c:43:7d:60:2a:2a:2e:ed:c9:95:17:70:17:
56:fe:cb:20:8f:6e:57:df:b3:71:85:d4:d6:4c:2f:1a:a9:6d:
5d:2a:ba:a7:d3:bf:8c:c5:21:f8:a9:eb:8f:60:8d:b4:82:0f:
91:0b:dd:8e:5e:cf:a8:80:ed:1b:b4:dc:65:cd:70:7d:71:11:
db:6d:f3:3f:46:60:5e:74:ee:d7:5b:88:b9:f8:fb:31:40:44:
1c:5e:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:08 2025 by rpki-client