Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9671d99-38a0-3c47-8d5a-c2bdb7b57234.roa
File: b9671d99-38a0-3c47-8d5a-c2bdb7b57234.roa (raw, json)
Hash identifier: kN/NZHBFFEbsndjm3JyxUI2T2JX9TQhPWp3WU3MbJ6g=
Subject key identifier: 2B:15:92:A3:5F:74:CC:FD:45:92:A1:FB:4A:4B:A7:CE:60:8B:9D:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EDBAE27E4F72CEE4A8CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9671d99-38a0-3c47-8d5a-c2bdb7b57234.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.24.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:db:ae:27:e4:f7:2c:ee:4a:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1e14eaa4-ae94-41f1-bb78-70b9cfdb58c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:2a:2b:b8:ad:07:b1:a8:a0:3e:59:e5:c0:
b4:ec:da:07:bc:e5:2f:9e:d0:5a:7a:9f:72:96:cc:
76:1b:c5:58:5e:ff:8b:f0:3c:48:c3:5c:7c:cd:bc:
13:08:72:6d:f1:e7:53:33:0f:b9:5a:99:7c:24:7f:
97:51:5b:fc:0e:da:3c:9f:03:08:f3:f1:75:8b:81:
e7:76:2d:18:03:ca:69:ca:d6:94:cb:42:3b:04:4c:
c9:70:2c:f6:29:aa:8b:30:e3:5a:85:74:bd:ee:6c:
35:00:98:01:67:73:9e:03:ad:91:70:10:ed:53:f1:
71:11:59:91:86:3f:7e:8f:c0:b8:b2:e3:48:f7:ff:
5b:a7:21:0d:32:a4:cb:e9:68:88:98:0a:c6:39:15:
b0:ac:f2:10:ed:96:59:81:99:62:02:9a:01:94:54:
6d:ad:8e:07:06:58:66:53:02:a7:33:5c:35:1c:d6:
ce:26:b4:d9:00:16:e0:c7:09:98:ea:6b:f4:e0:18:
ec:8b:6d:f5:f1:a1:69:9c:82:a0:e8:cf:6d:70:5e:
b3:bc:8d:fe:ad:e6:74:e7:90:1c:84:07:0b:64:66:
cd:a7:6b:72:70:34:39:11:3c:7d:77:38:4c:86:fb:
6a:cc:0b:da:92:7a:a5:1b:ea:64:d0:cb:32:8a:16:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:15:92:A3:5F:74:CC:FD:45:92:A1:FB:4A:4B:A7:CE:60:8B:9D:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9671d99-38a0-3c47-8d5a-c2bdb7b57234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.24.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:15:00:58:42:c6:28:42:99:f0:3d:26:92:66:8e:6f:55:78:
8a:5d:4d:0e:b3:32:87:ca:16:a9:34:c7:e3:ba:6e:64:37:8c:
ef:29:75:bd:63:7e:6a:7d:5a:45:f1:55:ec:39:af:48:03:27:
15:e7:cb:0c:e9:6e:74:68:cb:50:a2:9a:3a:ef:3e:fe:4d:e4:
6c:09:04:43:36:81:3c:57:fa:9b:52:c9:03:83:d4:23:dc:3e:
4e:40:b3:c4:0f:46:db:a6:58:aa:55:ee:4d:a8:23:b1:3f:b4:
34:43:46:22:e1:61:e9:6c:ea:71:b2:59:4f:59:01:f0:05:eb:
83:0d:28:e0:24:9e:0c:13:a1:28:3a:b6:a7:40:84:8f:2b:56:
b7:d5:01:79:d4:02:7c:a9:35:dc:c4:0f:70:12:f1:69:8c:de:
7f:33:e4:2d:54:10:6a:c1:d7:5e:df:75:e3:a1:b5:74:13:ec:
93:82:4d:12:d2:8a:f7:c0:a4:12:3f:6a:94:d7:b2:76:48:d8:
4e:0f:b1:a9:65:f2:fe:d9:06:41:78:89:4a:a1:5e:f7:64:7c:
14:41:90:f1:b6:47:6c:2d:f7:9a:c8:57:40:ef:28:f2:26:68:
4b:f1:c7:c4:78:15:24:b9:16:51:25:ab:77:93:ba:3f:fb:71:
05:88:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:02:24 2025 by rpki-client