Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88c84878-c096-35a1-b8d7-7901f9be5dd9.roa
File: 88c84878-c096-35a1-b8d7-7901f9be5dd9.roa (raw, json)
Hash identifier: andLtfH1+xnk+BibmKTmPjiZUbrmxGkDxzFIq5szz8Q=
Subject key identifier: 41:E4:50:99:89:5F:0A:C6:FB:2E:99:24:78:DF:4D:EA:50:A2:91:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C476511BE946DC1AA8740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88c84878-c096-35a1-b8d7-7901f9be5dd9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.195.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:47:65:11:be:94:6d:c1:aa:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0ea9aca0-d1a6-4de6-bf23-624f8851cb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:f1:4b:37:dd:ea:d1:b0:0d:16:06:d8:7c:
42:57:06:9c:89:3a:95:6d:bc:b8:fe:ed:c0:e8:2f:
25:a0:b0:e6:2f:6d:c5:ae:8c:a7:f6:c7:89:78:c2:
c4:51:46:21:48:8c:2b:0f:55:c4:c1:aa:43:e6:78:
bf:6b:3a:e2:5d:04:9e:32:3d:d9:f8:c3:27:1b:5e:
c9:2e:9c:72:a9:36:27:1e:2e:fb:58:15:2b:35:13:
17:4f:0d:eb:c2:52:e2:b9:f7:e4:00:0c:25:bb:7a:
3d:08:4a:ac:fe:d5:2f:a9:b6:11:6d:52:72:e3:d6:
d8:75:5e:28:92:9e:43:51:d3:ea:01:d8:f8:a5:fb:
37:f4:6d:42:dc:bb:7d:d9:44:ca:a7:65:20:c0:9c:
d5:b6:2a:cf:51:11:67:2e:92:67:27:40:94:38:d5:
24:e8:d7:9e:03:ae:3b:e8:e5:26:18:52:9d:79:98:
e1:dd:34:f2:59:2f:1f:2c:84:24:7e:71:d7:25:09:
1d:01:17:6b:f8:01:a2:04:3a:fe:3d:5c:51:d3:7b:
83:c9:22:cc:d5:a2:ac:2c:39:d1:29:e8:f3:18:c5:
ed:6e:ae:97:f1:9d:51:b8:3a:fc:88:43:43:9d:b8:
45:de:30:a6:96:63:18:2e:67:97:19:97:b9:bf:a3:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:50:99:89:5F:0A:C6:FB:2E:99:24:78:DF:4D:EA:50:A2:91:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88c84878-c096-35a1-b8d7-7901f9be5dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.195.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:27:26:73:0e:a5:c3:12:c4:7a:e0:a6:6b:72:e6:86:75:2b:
92:87:7c:a8:91:f7:27:b4:04:2d:9c:8d:99:3f:e2:63:64:e9:
0f:c9:96:63:a4:3c:6e:2e:69:39:ca:0e:11:b0:f4:29:99:6f:
92:f7:b5:45:39:df:87:c9:c1:34:75:9e:9d:79:85:1a:4a:2b:
d9:f5:15:f4:ea:94:26:a1:87:cc:d5:2f:d5:e6:ac:e3:a6:9f:
3c:5f:73:02:87:a6:87:34:0b:79:c1:8e:37:8a:8b:8a:3b:20:
8d:5c:fa:b4:6a:c0:75:b2:27:9d:24:59:97:67:db:85:14:15:
d5:af:b6:95:be:ae:95:f1:55:e3:a3:53:c6:f2:bb:9c:49:72:
54:8b:1c:e1:31:ec:c6:42:52:be:62:f4:65:e6:4c:8e:46:19:
e9:3a:22:70:37:0c:93:b8:8d:0d:54:ec:b0:a4:71:bc:25:4d:
4b:d5:0c:2d:b5:2d:1e:af:fd:c0:e1:4c:0e:3e:fd:10:98:02:
c0:44:d9:76:c0:30:ab:7b:e6:b9:ba:98:aa:9e:68:07:88:c6:
36:39:cb:ae:e9:ff:31:bd:5f:d7:62:08:3a:39:d6:f0:e1:d8:
93:32:6d:31:67:3f:1d:32:17:9f:7f:97:e8:29:ee:f6:81:66:
f2:f8:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:47 2025 by rpki-client