Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad0ec903-9c17-3e06-8549-e5833d84f3e6.roa
File: ad0ec903-9c17-3e06-8549-e5833d84f3e6.roa (raw, json)
Hash identifier: kqC8lWMyRNS78rUhvaT9D9TyvWPAKHeAkZWqR5Uy4jU=
Subject key identifier: 19:DD:35:4F:B9:71:D0:6C:47:84:10:F6:94:5C:7E:C9:74:CD:C0:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C14F36672A9F918ED3362C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad0ec903-9c17-3e06-8549-e5833d84f3e6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.207.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:f3:66:72:a9:f9:18:ed:33:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8ec3425a-d46d-46a7-97dc-b1a9059d5fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:58:d1:01:77:1e:82:69:8f:46:16:41:40:
72:8a:ea:22:09:9c:4e:ef:1f:8a:41:76:7a:9d:7d:
fc:b9:b4:a6:67:13:e0:36:e9:08:60:5c:87:7f:f4:
b1:ec:7b:e1:59:2a:e8:3d:d2:1d:c3:52:e3:31:66:
24:49:0d:e2:6b:d6:e1:21:21:05:80:d5:e6:7e:11:
82:20:85:0f:d8:a3:72:01:38:98:67:53:2c:b4:08:
65:54:f7:e6:94:fb:5e:c9:35:6e:b6:93:fa:4b:c3:
74:84:9e:5f:76:e9:ea:71:80:76:85:b8:1a:70:f1:
b3:4f:46:a6:57:e9:ff:99:d0:a2:e1:23:bb:11:9f:
b3:57:e1:a0:4d:af:f9:c8:68:00:49:0d:71:84:91:
48:eb:1a:ef:74:bd:67:1a:e8:12:c6:57:6e:71:c8:
49:a0:af:09:44:07:9d:30:a2:a8:46:ea:ab:16:b3:
55:89:2f:53:17:c1:84:23:a8:32:e9:f1:4e:76:6d:
9b:12:85:9e:1b:72:ac:9c:b4:f4:69:1c:25:e6:cb:
4b:c2:a0:6a:02:4f:66:89:05:2a:a7:cc:59:cc:4c:
52:33:3e:8a:94:cd:f9:79:37:f3:c7:70:ff:94:7d:
bf:ee:50:ab:79:fe:71:bf:56:f1:5a:27:8e:c2:20:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:35:4F:B9:71:D0:6C:47:84:10:F6:94:5C:7E:C9:74:CD:C0:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad0ec903-9c17-3e06-8549-e5833d84f3e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.207.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e0:96:7b:37:61:a8:fe:ef:34:e6:c0:d1:4e:08:b9:93:54:
c8:d8:8e:8b:18:16:33:96:d9:1e:27:ff:c1:88:23:97:e7:92:
00:e7:56:60:0a:00:48:9b:b8:2c:22:0a:3c:3f:03:db:98:83:
c5:1b:09:ca:25:5a:27:36:b9:c9:1e:16:a2:ed:68:bb:66:00:
0c:07:11:a5:62:c7:60:e3:15:fd:77:a9:cc:32:75:d1:c8:f7:
f8:49:57:f0:f7:62:79:e1:f8:82:25:7c:af:a4:22:18:1b:c8:
25:22:61:12:c1:83:cb:62:89:42:2b:18:56:27:a2:07:8c:91:
e0:67:7a:b8:c2:eb:56:85:f8:1f:61:8b:3b:67:0d:a9:5a:e2:
66:50:25:d6:f2:9b:f3:12:77:d5:ab:5f:66:d2:10:19:46:e8:
e1:01:2c:69:82:86:f0:ac:3c:8b:91:90:dd:83:d5:71:23:fc:
e0:06:89:18:4b:26:91:44:f6:d5:03:75:7b:cb:dc:c1:47:b2:
5c:d5:a1:fe:4a:37:aa:60:6c:21:98:7b:50:0c:96:53:f9:6b:
8a:e0:25:55:8b:de:5e:bc:67:2f:d7:ea:a1:7b:11:41:38:98:
c9:e3:10:d3:0f:17:bd:30:3d:d2:e8:fe:7b:55:28:b9:6d:a3:
c3:3f:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:19 2025 by rpki-client