Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99a082a2-22c0-3bb6-9d88-57be02bdac4b.roa
File: 99a082a2-22c0-3bb6-9d88-57be02bdac4b.roa (raw, json)
Hash identifier: 1Z2ilnaD45hkGrYDosh+nYCpF6QFsV+Kjt87RVO7uE8=
Subject key identifier: 92:86:3C:19:52:55:31:97:8B:AF:61:FB:90:74:87:1B:24:02:8D:30
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C155E0EFE6CBDF74C0728B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99a082a2-22c0-3bb6-9d88-57be02bdac4b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.47.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:5e:0e:fe:6c:bd:f7:4c:07:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=34d43e10-8a0e-418e-bd52-61c594d52c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:5c:d5:f1:70:8e:b8:1c:bc:da:92:2d:c8:
80:48:c1:ab:e1:0e:72:a4:f7:2d:44:67:83:16:90:
ff:b1:e3:af:a3:8d:53:f9:22:69:25:6c:ba:5e:1e:
30:f6:a5:54:0a:f6:e3:c4:cd:9d:b6:e4:7a:45:71:
4c:72:9b:ef:25:9f:1b:9f:7f:10:21:82:ff:29:43:
b3:20:0e:73:76:1c:15:a2:37:85:75:66:e4:76:d5:
78:17:bf:20:98:69:98:d4:9b:10:98:cf:33:ae:20:
28:d3:3e:b5:8d:d2:8f:d7:b2:10:95:a5:4d:95:9c:
2e:d7:b5:4d:21:ce:3b:cb:59:03:23:20:dd:6c:fa:
e3:fb:37:73:66:2d:dc:5a:03:ab:01:91:2a:0f:77:
d5:62:a1:01:09:16:82:8c:7b:fd:44:e3:53:37:5a:
68:f3:0d:35:1e:ac:44:ab:00:72:69:d0:68:1b:dc:
a5:8e:83:c0:77:2d:06:cd:75:3b:3a:b5:e1:38:af:
c7:ac:85:1d:94:19:88:0c:52:1b:55:9e:31:4c:f5:
70:1b:71:ad:e5:43:92:c7:9f:9e:69:bc:cf:96:ba:
3b:68:e7:98:d6:fb:68:a4:4d:2b:b8:2a:20:51:e5:
af:2d:f7:ef:f7:af:29:5a:27:4e:79:35:57:ef:ce:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:3C:19:52:55:31:97:8B:AF:61:FB:90:74:87:1B:24:02:8D:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99a082a2-22c0-3bb6-9d88-57be02bdac4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:fd:9f:98:eb:42:f8:77:57:1e:d3:3f:a1:c6:c2:ac:ba:fa:
c0:65:0b:d5:63:05:b9:12:06:e7:35:76:56:05:15:15:2d:c2:
8b:ea:8a:73:3e:58:66:b0:a1:91:20:88:b9:63:98:51:9b:7b:
da:46:6c:4f:25:e9:cb:32:0e:3e:3f:63:5f:3c:15:7b:ce:de:
8e:1e:a6:9a:be:77:9e:2b:c8:cd:74:51:f7:70:86:e4:fc:86:
e4:39:d5:31:6e:e3:0f:4b:c2:7e:05:fc:15:d5:3c:de:63:ec:
be:bc:48:1a:39:cc:41:01:63:f2:80:ae:70:66:cc:0b:ae:a5:
51:90:16:50:08:68:f1:8d:ff:81:30:1f:93:6e:6d:bc:4c:e0:
4c:69:dd:3f:d1:a5:8e:ec:a5:92:01:58:c9:1b:24:db:4b:2c:
82:53:05:b1:de:4b:10:c1:b5:3d:a7:b5:ed:97:ec:7c:5d:86:
ab:5e:a9:cf:5e:a4:b9:7f:42:89:37:1d:5a:13:b7:f9:f8:c1:
53:38:e6:51:c4:02:9a:f9:ab:51:a7:15:b4:31:5f:d8:9c:54:
54:c3:d3:6e:85:f4:5c:d7:67:d9:57:b2:0e:c3:b8:ac:66:36:
66:0e:91:f9:0e:4c:2b:b3:4c:a0:a1:81:33:7a:aa:29:fb:31:
e5:b7:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:10 2025 by rpki-client