Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c638cf0-1262-3315-9888-feb6f4629ee7.roa
File: 9c638cf0-1262-3315-9888-feb6f4629ee7.roa (raw, json)
Hash identifier: o26d32ZHfN3zUIxZ5j5ktR8fpHTtB9MQ+O1tiiiN6V8=
Subject key identifier: 9E:1F:83:24:B8:B0:EF:5E:E1:51:27:43:81:56:F5:FB:31:2A:B9:4D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11BF5868F1D09844985080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c638cf0-1262-3315-9888-feb6f4629ee7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.234.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:bf:58:68:f1:d0:98:44:98:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0bc655a5-67bc-4503-a406-8874d9abc359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:67:c0:10:40:fb:f7:3f:b6:43:cf:c2:4d:
4f:2a:13:6d:52:55:60:ad:08:73:b2:a0:36:f0:c3:
6a:ad:34:e7:a9:2e:5c:cd:2c:13:c8:17:2d:1c:ab:
23:15:19:46:3c:8d:d3:e5:31:57:19:71:c3:4b:97:
c2:82:c0:6e:85:45:d2:09:20:0b:b6:20:6f:1e:13:
a2:d3:c8:01:ab:d4:ba:b8:f0:ad:8e:8b:fc:fb:9d:
f6:4e:0f:4c:60:92:a3:71:24:cc:b3:de:20:be:0f:
e2:48:4d:90:cb:d3:dd:02:25:87:8d:06:12:54:3b:
82:72:05:3d:ed:d1:06:3b:11:c1:57:ea:15:b4:ca:
fd:52:72:13:52:8f:4b:81:72:7c:97:67:9b:52:8c:
91:10:27:0b:e6:97:aa:78:8e:33:df:a1:ca:b2:3a:
7b:b1:32:e4:e5:bc:2c:a8:10:48:24:e4:9a:0d:16:
b6:16:ca:f1:fe:a7:15:b9:52:a0:24:61:2a:70:2e:
69:79:21:f8:bd:05:19:c4:81:45:10:fe:d3:1c:0d:
18:31:f2:c0:6c:a0:63:0d:c5:b6:75:ce:14:c6:a3:
03:0f:d9:69:48:c3:bb:33:82:9a:3e:16:7d:9e:46:
f2:84:2e:1d:de:94:13:f7:54:c4:fa:61:00:cb:61:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:83:24:B8:B0:EF:5E:E1:51:27:43:81:56:F5:FB:31:2A:B9:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c638cf0-1262-3315-9888-feb6f4629ee7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.234.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:fc:40:ff:e7:54:1a:df:8e:ff:b0:b8:a2:de:4a:25:d8:36:
d9:fb:8b:32:69:2c:ee:e9:a7:0e:a5:e7:e3:92:3d:8a:82:fb:
b3:9f:9c:7a:17:5f:d7:fd:2d:28:6e:05:96:6f:62:5b:eb:ed:
8c:47:0c:96:f8:93:57:7b:34:b3:37:93:34:97:ba:ca:71:04:
05:fd:63:6f:7b:4e:df:35:06:f8:fa:f7:8a:c4:0b:f5:3e:3a:
48:c9:04:cf:1f:1a:eb:9e:6f:18:26:bc:19:05:46:c8:16:28:
ad:8f:c0:cf:a7:59:2a:51:c6:ca:78:18:d5:75:9a:52:48:bc:
1d:e1:e4:69:e3:f2:eb:61:5f:31:6d:2b:9d:d0:a1:c3:42:79:
15:42:2d:1a:4e:4b:09:a7:19:86:ea:67:2d:b9:8f:d3:3c:9e:
95:40:82:2b:1e:87:ee:9d:dc:00:05:28:a4:68:b5:50:54:ad:
58:5f:fa:3e:75:cd:2b:3a:9a:4f:cb:30:94:54:3d:6e:22:df:
fb:27:c4:0c:f8:84:eb:cb:3d:1d:a5:48:fb:91:be:36:2f:80:
4b:ee:36:09:d5:4b:d9:37:24:ad:b7:00:f4:ec:45:4f:3c:01:
45:0c:40:6f:79:13:e5:f8:d4:30:01:0a:b8:c6:fa:cf:5d:1e:
1f:e1:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:08 2025 by rpki-client