Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aad4c4e1-2047-37d4-8d10-114bbc8b2a9e.roa
File: aad4c4e1-2047-37d4-8d10-114bbc8b2a9e.roa (raw, json)
Hash identifier: QyvTpmUDokfrTQG+oaqjkHxGB9FTjVrFkz3MyphO4XE=
Subject key identifier: A9:84:9D:D6:16:80:A6:21:F4:00:7D:C9:D3:C2:42:51:15:B0:63:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C115020B6859E72CDA62640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aad4c4e1-2047-37d4-8d10-114bbc8b2a9e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.214.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:50:20:b6:85:9e:72:cd:a6:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=cef0c222-4c18-4578-a56a-8f4fea5f4a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:63:69:e2:86:44:05:50:5a:12:07:75:a4:
06:76:2d:58:fc:c2:7a:5d:95:8a:78:7a:49:32:e4:
ab:29:f0:45:3f:84:c5:bb:a2:d5:a0:07:cb:5a:15:
02:a7:8e:be:70:69:d7:9e:0f:e1:59:3b:9b:67:89:
d1:e4:ec:28:6b:2b:cb:bd:c6:b4:23:07:4f:83:3e:
5e:3c:86:47:0a:35:9f:9a:8c:8c:92:ea:8d:80:49:
ec:d9:2c:45:f5:9f:0e:e9:dd:61:df:88:ac:7e:14:
81:c6:a9:53:f9:1b:39:95:48:0b:bb:20:d4:36:ad:
2e:28:6d:a2:f4:eb:92:96:d9:9c:d0:9e:32:ac:8c:
a7:ec:72:a0:6b:b0:bc:31:02:a6:83:c6:39:93:1e:
ae:c0:c9:e0:67:66:e0:00:16:80:07:46:dc:3d:1f:
14:6d:13:e4:f8:2f:e7:0a:9f:0e:cd:a3:7a:30:cd:
b2:0f:08:4d:07:01:01:fb:03:ca:10:ce:b0:a4:68:
eb:ba:e9:cb:9e:58:95:03:c8:64:5f:ee:0b:7c:45:
66:eb:28:e2:24:03:66:b1:eb:bc:8a:7b:dc:f3:25:
b6:b3:a2:75:af:19:b1:61:6f:d8:98:c2:db:a3:1a:
9a:ff:f6:53:bf:d6:70:4f:a1:6d:17:76:9a:b0:0c:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:9D:D6:16:80:A6:21:F4:00:7D:C9:D3:C2:42:51:15:B0:63:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aad4c4e1-2047-37d4-8d10-114bbc8b2a9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.214.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:13:49:7c:1a:61:a9:f8:33:00:81:6b:7a:7a:34:28:27:4e:
34:75:6c:49:f0:94:07:e4:4c:df:0b:ca:a6:a9:77:dd:14:6a:
87:a6:30:54:99:89:46:27:cb:17:5d:b0:e9:2a:ac:12:32:fe:
94:45:91:e4:bc:31:a6:54:ce:5f:59:06:27:3d:c6:fc:9a:2f:
d3:40:42:c4:d9:03:3d:cb:8e:90:f4:ad:1a:39:9b:a5:48:1f:
14:52:49:90:7f:64:66:f3:ef:44:4c:0f:8f:69:a4:10:d4:a0:
78:ea:4e:aa:6f:bf:82:4e:75:a4:7f:cb:32:29:d8:36:1d:27:
17:18:ff:d1:a7:de:b2:1a:e8:6f:c4:e3:41:68:2c:8d:25:8a:
46:98:f3:d1:31:97:a9:eb:4c:46:c0:f8:67:4b:25:cd:46:4e:
c8:9e:dd:4d:3a:e0:1c:d2:b7:53:fe:0e:aa:a7:3a:fc:e4:93:
ba:ad:e7:8b:90:4c:c4:7e:6c:c1:d1:91:6f:3b:4a:45:74:b7:
9b:88:40:0a:d5:df:64:67:a5:2e:37:19:a6:12:26:a4:dc:61:
c4:a0:8a:65:1f:69:fa:04:6a:66:7f:59:42:fb:2f:cd:c3:05:
cf:a8:50:1b:22:f4:db:a0:35:0b:5a:00:f9:59:14:e0:25:67:
7c:fc:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:12:37 2025 by rpki-client