Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb3b8e57-3dc8-3956-a4dd-a222df318c3c.roa
File: bb3b8e57-3dc8-3956-a4dd-a222df318c3c.roa (raw, json)
Hash identifier: OGOHhjGD6P/le9PJfLVCXMxo9naNWVGWtKa2IH96odI=
Subject key identifier: 00:DE:68:67:51:B4:9E:85:CE:14:D0:CB:4F:CD:26:E7:D1:10:DF:FA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CB07274E701D778F6670
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb3b8e57-3dc8-3956-a4dd-a222df318c3c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.47.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:cb:07:27:4e:70:1d:77:8f:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=489a185b-bf2d-4466-ab4c-fb0f863aca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:ac:e0:33:60:b5:c6:0e:eb:62:39:c9:bb:
0a:b0:2f:0c:07:d3:b9:37:a7:c4:c8:5f:4b:8d:be:
bd:99:bb:eb:d8:b9:e2:bc:1d:24:20:22:f4:25:e1:
c1:1a:29:ec:90:23:f2:65:60:0e:73:ea:bc:96:05:
4e:51:a8:be:c0:94:3f:10:96:2d:b1:3f:f8:33:b6:
40:3d:70:1f:51:83:80:5d:a4:17:d2:52:f1:a4:80:
b9:d0:07:d7:8d:09:5b:2d:f9:e5:eb:88:9a:90:41:
86:5e:ac:a7:e3:e9:ed:aa:00:86:be:8e:5d:0c:fd:
8a:a1:e8:22:7b:7a:bb:bd:b4:c7:02:e7:35:c8:08:
29:0b:ef:8b:85:ac:62:36:57:5b:10:6d:ff:a2:dd:
ee:11:88:6d:fe:2b:20:bb:de:2a:53:a5:3d:ad:a5:
6b:fe:c7:03:5d:48:1a:89:fa:08:73:18:5e:d3:5f:
6a:0a:c0:dd:5c:59:4d:a1:92:49:72:c0:83:ee:69:
f4:12:bf:d2:81:26:9c:a9:4c:bd:1c:db:a1:5c:72:
2f:88:d2:65:56:9d:09:fc:00:16:2d:07:20:e3:c2:
89:0d:ae:5e:3a:8c:ab:7a:99:5a:a4:ec:8f:28:35:
7d:e1:d8:bb:89:6c:53:3a:c2:33:18:0b:4c:e4:c5:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:68:67:51:B4:9E:85:CE:14:D0:CB:4F:CD:26:E7:D1:10:DF:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb3b8e57-3dc8-3956-a4dd-a222df318c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:64:4b:7b:40:8f:b4:71:96:74:60:83:87:09:9a:f0:e4:aa:
58:83:24:ec:30:1d:42:97:45:4a:7c:cc:53:64:db:c3:32:15:
8c:57:54:cb:d5:7b:c2:a3:76:94:dd:e1:3a:b4:f3:c5:d0:ae:
cc:06:9d:21:b1:68:18:c9:60:fc:6d:9b:f0:c3:92:c0:3d:81:
a9:c9:7a:5e:c6:69:fc:be:35:eb:44:ce:af:01:76:cc:14:67:
fe:91:64:8d:b5:ec:1a:d9:23:68:e4:d8:46:f4:95:7a:2d:cb:
e8:a1:f3:b9:1f:30:9a:c6:35:f8:f1:fd:88:75:0a:bb:73:98:
4e:cd:3c:20:2c:25:b1:fc:06:4c:ff:1f:76:ef:d2:52:eb:71:
45:52:f7:3d:98:c1:92:81:e7:5b:2e:b0:d8:4f:45:ad:aa:3c:
1a:76:79:1d:40:b0:ad:9e:c0:c7:6c:bd:54:6e:a4:04:cc:92:
b2:da:e5:23:22:e0:a9:d4:a4:da:7d:6e:6d:59:fb:79:27:4b:
3e:c6:6f:ba:c7:71:81:e7:ea:19:64:0f:41:79:d0:40:96:c8:
aa:f7:60:76:54:a0:5a:73:79:76:a9:f9:7f:a2:39:57:98:42:
05:38:30:36:d6:38:16:f4:35:54:1f:ee:dd:35:da:2c:4c:32:
88:38:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:23 2025 by rpki-client