Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/945f29ef-a5c9-3951-b0dd-a9619cc10be4.roa
File: 945f29ef-a5c9-3951-b0dd-a9619cc10be4.roa (raw, json)
Hash identifier: kF3H1nBJQK5etP0GpU+FnrNcNER/viuQHBRVkNAQOGI=
Subject key identifier: 7A:B6:1B:D4:05:FE:68:73:2A:13:44:9A:DB:7E:01:F5:EB:FB:F3:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848116FF35523B446857112BF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/945f29ef-a5c9-3951-b0dd-a9619cc10be4.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 22258
IP address blocks: 98.251.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:f3:55:23:b4:46:85:71:12:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=eb95de7b-3135-4c33-8fd0-a0cd45da0916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:cb:5a:9f:44:43:12:22:8b:43:a9:be:e6:
38:ec:07:e9:b3:64:8a:23:0a:a8:cc:81:44:5b:54:
f0:85:07:8c:7c:60:b3:db:05:8d:0f:ed:89:af:4a:
85:83:a2:1a:ff:86:dc:6b:e4:29:12:87:24:30:4c:
b2:58:08:8e:58:e3:b6:35:15:27:fb:86:a9:9e:c0:
77:7e:cf:df:f4:82:52:93:89:aa:bf:e6:83:d8:cf:
93:fe:44:52:b2:52:16:28:ea:cf:c6:58:ac:61:b1:
36:65:ab:1a:d9:e1:ff:a3:d8:40:83:e4:e7:7f:56:
fa:11:be:d9:2a:ea:e5:39:3e:f8:b9:0a:29:39:31:
ab:02:ac:8f:80:be:2d:cb:34:a1:51:c3:8e:33:2b:
fa:72:08:a4:a2:1d:b2:2e:bc:74:85:c3:48:47:14:
6c:6d:27:65:69:33:59:b3:d9:a6:fe:19:c3:e3:18:
d2:8d:f9:79:9f:f0:8e:0f:3a:dd:07:61:b4:45:73:
ad:57:e1:70:1e:88:80:ec:1d:b4:bc:09:e6:e9:75:
87:45:a3:b1:ee:77:95:bb:23:b7:a8:d1:27:ea:4e:
7d:5a:50:4b:ca:f2:08:d5:e1:f2:64:ee:5c:3e:18:
33:f2:80:75:a8:a0:fe:db:fa:e6:f3:3b:0e:52:62:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B6:1B:D4:05:FE:68:73:2A:13:44:9A:DB:7E:01:F5:EB:FB:F3:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/945f29ef-a5c9-3951-b0dd-a9619cc10be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.251.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:37:99:25:cc:c8:ba:e7:86:7c:9b:c6:87:87:27:aa:4e:38:
64:75:9f:5f:9e:be:4a:2c:8b:e0:58:70:6c:3f:e3:a9:b6:7a:
f7:21:9e:a8:3e:39:4e:78:c2:04:be:eb:f3:36:2c:dd:21:a7:
a5:7b:c3:af:1e:ce:37:27:40:0c:34:bc:d0:26:22:09:10:52:
b5:cc:b8:58:98:89:0e:dd:c7:42:ad:ff:3e:38:e7:33:1b:04:
cf:c1:1d:ec:dc:d5:e0:c5:c8:71:05:30:ce:83:61:1d:a3:e7:
7a:4a:65:97:67:a6:1b:04:da:23:00:0f:2b:94:06:3d:04:b4:
85:9a:a4:c9:bb:51:e3:a2:4f:da:22:1c:c9:0f:0b:f7:7f:af:
a3:5c:ab:8c:9e:55:de:e2:ac:5c:6f:ed:d3:55:b8:f3:8e:fa:
55:ba:47:b9:b1:74:ad:1b:8d:ef:6d:5e:96:5a:e5:38:5c:32:
2e:e7:35:96:ba:14:d2:a4:6a:4d:2a:64:46:bf:ee:64:8b:a1:
f8:12:f6:52:18:06:76:fc:a2:3f:bc:6c:5e:07:7a:69:c8:b2:
e4:3d:70:4f:7d:21:18:06:0a:b9:a9:1e:34:34:ac:b4:6e:b1:
bf:a3:82:bf:94:e6:2a:fe:43:24:e5:ce:0c:86:83:bb:cc:d0:
28:79:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:49 2025 by rpki-client