Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa
File: aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa (raw, json)
Hash identifier: LkHChPTma+g2DJJK6NzplsoMgbTWHwa2bgkoVBjNe98=
Subject key identifier: D1:A6:8A:9B:EC:80:57:72:B0:8D:F9:46:39:9E:6A:A4:EE:C3:D5:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B3956628F64173E5ED200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 98.217.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:39:56:62:8f:64:17:3e:5e:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1f525cfd-48f7-4aae-9933-cdbc503962ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:1e:fb:68:1e:23:d3:22:50:e1:2e:00:e4:
f2:23:8d:fd:73:07:cb:e5:cf:71:d2:07:a2:8c:19:
67:f2:7f:8f:02:b2:62:8c:d5:2e:3b:bc:1c:d1:08:
ff:10:49:27:0b:0a:f1:b8:2c:45:ae:51:6f:53:82:
c3:cd:1b:6a:e4:66:2a:f6:d0:58:6d:af:aa:ab:a1:
14:7d:08:a4:a1:a6:c2:50:34:f4:4c:93:0f:a5:2f:
a9:16:71:91:ef:ad:12:50:86:3c:10:16:e9:fd:59:
74:39:90:71:70:d6:00:78:33:56:72:74:c4:42:c1:
fb:8b:50:1b:94:50:36:95:79:9b:2f:e6:df:c1:7c:
46:6d:6d:2d:b2:4e:97:e4:b9:43:af:97:cd:d2:49:
7b:d9:b8:b4:72:8f:fa:17:dc:0a:7a:12:50:21:86:
d6:0d:39:51:76:57:7d:bf:bc:dc:dc:73:28:e4:5d:
8e:43:db:58:03:c8:fc:59:96:01:df:21:ed:82:d5:
7f:7a:68:9f:5a:3e:af:09:11:24:02:55:f8:f7:f1:
7b:b0:24:96:6c:16:cb:2b:84:d6:d3:2d:ca:5f:b1:
85:0c:06:75:78:23:c1:cf:4c:79:08:1e:e6:a6:b2:
4d:7d:d9:9d:fc:a5:9f:8e:c8:a7:56:c6:aa:a7:0c:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:8A:9B:EC:80:57:72:B0:8D:F9:46:39:9E:6A:A4:EE:C3:D5:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.217.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:15:54:22:8a:ce:21:71:0c:b1:49:82:4a:a2:d9:d9:8f:0c:
2e:3c:a2:1f:39:69:e1:fb:6a:c1:d6:16:7a:c6:0c:b2:bd:c8:
fd:df:52:cf:9a:29:d2:80:1e:f7:a6:14:3b:f2:82:1d:d5:52:
4d:75:0d:4e:5c:c9:98:1c:de:fc:7f:5b:86:12:09:fa:3c:12:
a2:57:52:08:d5:78:2f:8c:20:50:d4:32:02:db:17:a4:08:36:
93:e1:35:d8:5b:a2:75:e6:37:04:44:dc:97:e0:0b:cd:87:1c:
81:03:44:3d:06:cf:48:ee:a3:a9:88:23:c2:a2:75:3b:13:df:
1d:0a:2c:6e:84:fb:a5:bb:df:7f:36:74:68:e6:38:7f:71:88:
2a:ae:6d:a1:9e:b3:de:e6:9f:eb:66:e3:ae:3e:67:d0:12:97:
00:11:75:16:c1:4d:08:08:a2:f4:1f:80:e5:56:e4:f4:07:5e:
43:81:6e:df:99:bd:d7:a9:0c:aa:30:90:48:2f:b7:62:7b:df:
e6:1e:d7:e4:98:30:24:61:65:8b:3c:de:b8:7e:71:2b:a0:8d:
91:b4:f3:c2:cc:80:b7:ee:6e:aa:a9:ab:ad:78:af:4a:ae:a2:
48:f4:2d:a3:49:fe:d4:a3:be:8f:19:07:71:9b:74:a0:cf:e5:
d6:a5:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:07 2025 by rpki-client