Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f1e72f-ee29-3de5-9763-7278d7aed6f9.roa
File: 91f1e72f-ee29-3de5-9763-7278d7aed6f9.roa (raw, json)
Hash identifier: yGFoaQWIK0nY7hgUrwGiMYTT2Jpmyo9bUmh7dE1eSXs=
Subject key identifier: 52:A6:3F:3E:31:DB:EF:44:EB:04:14:CC:56:C7:22:3F:24:BB:B2:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1543AA48FE1D28F9426A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f1e72f-ee29-3de5-9763-7278d7aed6f9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.45.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:43:aa:48:fe:1d:28:f9:42:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e558670b-de70-4c7e-92ea-71f469f411af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:30:5f:33:fb:2f:63:6a:62:85:1e:95:80:
94:b5:e9:dd:f3:33:97:42:ad:a1:8d:ec:21:8a:8d:
85:ac:0e:13:dc:1e:61:08:cd:75:af:aa:04:55:c2:
5e:63:1e:22:6a:b7:22:3c:f9:e3:ad:77:30:62:77:
47:bf:64:69:5f:2d:81:54:95:24:b1:b3:3f:9b:3b:
3f:0c:01:21:3a:79:dc:1c:cb:fa:aa:42:03:33:7d:
20:10:6e:08:9a:01:69:c0:78:40:35:95:46:1d:ba:
1d:e6:11:b3:01:51:b9:da:5d:be:7c:a3:99:22:2f:
da:3e:0c:63:a1:23:33:1d:bd:8c:f9:ee:ee:2b:cf:
ec:2d:6d:75:25:d3:0f:f8:e3:2c:bc:54:d9:6c:6a:
6b:e5:b7:9f:ae:79:fe:d3:93:e1:d8:19:d7:0f:03:
55:ca:bf:c1:1e:e4:fd:70:05:4d:19:bd:c6:d2:38:
dc:67:22:f6:f5:c3:2f:b5:1a:ae:fa:5e:ac:92:26:
35:9c:f8:e1:84:48:5b:9e:40:9c:9d:67:ce:40:12:
d9:b3:8e:cf:28:19:7c:66:01:85:dc:ce:c3:12:37:
9f:18:4f:94:d9:46:53:ca:31:03:e2:e1:ea:ba:83:
48:b4:57:62:38:4d:d4:c8:17:af:5f:52:90:64:14:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:3F:3E:31:DB:EF:44:EB:04:14:CC:56:C7:22:3F:24:BB:B2:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f1e72f-ee29-3de5-9763-7278d7aed6f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.45.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:57:3b:73:fc:98:36:39:76:11:a0:81:38:08:a4:2a:d0:2b:
80:07:60:12:d3:6f:36:64:03:7e:21:6d:bd:78:7b:5c:1e:a1:
76:08:bc:0c:52:16:c0:f5:05:ec:ce:73:7c:3c:ce:de:b6:c1:
6a:58:05:62:2a:48:4f:a9:b3:b1:cc:8d:f6:0e:ec:00:f7:2b:
4d:51:b5:a8:a0:0b:15:27:9d:4f:15:85:16:f4:68:04:35:8d:
6e:35:d8:bf:ce:6f:54:a3:98:b0:4b:2b:45:de:93:a2:e8:25:
92:d8:4b:d3:4c:73:11:6b:cb:de:28:4f:6e:24:17:14:f0:e7:
2f:37:4e:16:37:34:f3:02:99:82:03:90:87:ee:8c:ba:2d:6b:
62:48:d2:a9:db:41:62:5c:89:d0:c8:42:d3:e8:38:5e:13:be:
ad:a2:47:25:93:24:8b:59:c6:89:89:ce:16:9a:4d:c8:77:60:
ba:b2:6f:a2:72:5f:22:aa:17:3d:cf:e5:56:7c:af:3b:a2:86:
06:30:66:63:fa:bf:23:a8:f5:1b:57:f8:31:61:56:34:2f:15:
a1:3d:ea:20:f2:39:a5:d1:58:fa:c8:f4:da:04:b5:e3:b0:45:
a7:46:66:34:01:46:36:0e:ac:ee:b4:9c:61:de:36:78:00:74:
b2:f5:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:10:13 2025 by rpki-client