Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa
File: 86c6e679-2b34-330e-a1ec-10d58446b1c3.roa (raw, json)
Hash identifier: U9COfs0KwzaqBKZHfHiNA0v6DCT7KJEI3y/Co/rcX5U=
Subject key identifier: D7:26:9C:4C:B7:2C:D1:3D:71:45:58:FD:9D:25:87:AF:7E:08:FB:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C59A5FB054A984307AF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.196.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:59:a5:fb:05:4a:98:43:07:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ec3be416-aa4e-4838-bd57-aafb7e85646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:02:0a:8d:07:67:6f:f3:90:f5:8d:41:45:
60:60:5e:ad:c8:8e:30:22:92:ab:c4:d7:1c:54:f3:
43:49:58:e4:26:c9:31:b3:74:2c:df:0e:d6:3d:7d:
1e:ee:53:71:1f:24:20:eb:66:3c:cd:59:63:95:15:
e7:74:19:7a:b3:1f:4a:9e:ff:ff:6e:53:b2:2c:07:
27:2c:35:ed:98:0c:90:07:ee:f0:e9:95:a2:57:a6:
d4:56:c9:d9:0c:59:c6:28:e0:29:43:47:00:31:a5:
1b:b9:1a:1a:46:1d:fa:cf:d8:5f:14:a9:11:8f:6c:
28:1d:8d:10:62:72:56:2c:76:0d:d5:b7:15:21:e1:
06:64:ee:af:9d:dc:84:84:c5:ae:15:9f:46:69:d4:
fe:dd:b5:8b:ac:c2:ad:6f:a7:9a:ad:3c:ca:4a:4c:
77:ab:67:27:ee:fd:c3:4c:56:44:19:eb:f0:81:64:
a0:02:f0:f6:6e:a6:69:b9:5a:c9:9d:ef:ca:f6:7d:
ba:95:f3:14:11:17:12:d3:48:38:4e:9a:ec:ca:2f:
ff:da:42:8b:c0:a6:97:4e:a7:47:e4:93:05:d7:d0:
f2:e2:e5:08:a1:a7:aa:04:e2:04:ca:b3:ad:ff:2b:
a4:9b:4e:dd:b9:15:5d:c1:a5:fd:87:58:cd:23:87:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:9C:4C:B7:2C:D1:3D:71:45:58:FD:9D:25:87:AF:7E:08:FB:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.196.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:63:5c:fd:e4:9d:18:f8:d4:76:7b:33:ba:c4:5e:b9:93:9b:
a5:e4:2f:68:7a:c1:6e:70:38:b5:a3:7a:80:16:a8:75:db:dd:
10:e6:ae:bb:2c:6b:85:88:31:41:41:d9:55:8e:91:08:21:f2:
9b:5b:76:24:34:6f:24:6d:5d:ff:b4:5e:ab:6d:c1:15:b0:0f:
f1:23:c0:a7:39:a5:dd:96:92:b8:54:cb:ea:e1:dd:d8:90:30:
97:7f:7b:d3:82:5f:87:02:6a:82:fe:11:7b:bb:40:bb:b7:28:
2b:36:5a:f9:35:b3:ea:29:7c:0a:be:de:3d:45:95:87:29:9c:
c0:fa:ef:9a:87:e4:b8:b3:b2:85:28:ef:50:8b:e8:0c:86:fd:
10:d8:e5:6d:52:d7:ae:28:f1:ea:42:a0:c6:c3:19:6f:a9:30:
3f:d4:41:39:06:68:04:22:b0:2d:f9:a5:e9:ab:30:c2:b1:cf:
fd:ee:ae:80:65:fc:52:63:b8:96:c5:5d:a2:4c:89:20:c9:c2:
7c:b8:e1:07:a6:3c:4f:ee:09:4f:ae:43:2f:da:94:76:9b:15:
eb:05:07:08:21:52:c5:fa:a5:bd:da:55:95:39:60:02:e2:3f:
00:e1:29:67:e8:75:f4:23:f8:f9:f5:20:04:de:ed:07:16:d7:
66:e3:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:14 2025 by rpki-client