Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3af7f7b-d533-358d-ae78-6ce2c8334f03.roa
File: c3af7f7b-d533-358d-ae78-6ce2c8334f03.roa (raw, json)
Hash identifier: m4aW8LM5M62H0WA+5yEm2lsupre/Uy0EAobw6QwiTv8=
Subject key identifier: CA:37:41:AE:B1:DC:08:34:B3:CD:BA:0E:1D:D3:EF:75:B7:7F:93:41
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10DBDC1FBB9C4DBEAFDC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3af7f7b-d533-358d-ae78-6ce2c8334f03.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.38.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:db:dc:1f:bb:9c:4d:be:af:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=94756c39-ceff-4940-b82e-fd8fe986a6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:b8:0a:5f:30:cc:36:e0:ce:7a:89:53:46:
5e:6e:82:d1:6e:c1:13:d1:73:fb:85:64:1a:7e:bc:
0e:fd:14:2a:d2:52:35:ef:16:e0:4c:13:36:e1:2e:
79:c6:e2:0d:03:63:04:9f:18:74:b4:ad:79:d4:2c:
cb:71:59:dc:70:c6:95:09:4f:e5:09:a0:5a:0a:1d:
28:6f:6e:75:a5:4a:67:aa:ed:3c:90:c7:c3:0c:57:
8e:ea:39:50:d7:5d:f5:f1:ef:d0:e2:02:d2:9b:2e:
c2:b6:4b:b3:4a:94:00:44:56:e5:76:26:ef:f8:64:
3c:38:45:2a:cc:26:7b:b5:e3:59:77:b5:14:4c:7c:
06:0a:32:4c:54:d8:74:24:46:40:99:34:fc:56:54:
3d:5d:e4:b0:f4:05:7f:52:62:0f:88:c4:76:8e:75:
b4:a1:f4:fc:42:77:00:29:a6:03:99:62:2c:3b:f8:
ec:e7:69:e0:4b:02:c5:2e:ef:b8:93:48:d5:d7:c3:
b1:8e:21:ff:c6:0a:96:0c:cf:0c:18:10:45:17:15:
91:90:8b:30:36:47:b3:6b:b2:29:cf:2a:16:60:1c:
a7:50:c5:87:8f:f0:c3:2a:8f:be:95:b5:50:5e:3b:
33:6d:05:33:d7:1f:98:e1:a8:f2:27:9e:a6:0a:9f:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:41:AE:B1:DC:08:34:B3:CD:BA:0E:1D:D3:EF:75:B7:7F:93:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3af7f7b-d533-358d-ae78-6ce2c8334f03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:4e:51:20:58:f2:3c:0f:23:d3:3d:f5:70:63:22:0e:4d:9f:
18:04:b8:d7:99:38:20:6e:d5:67:73:b2:5e:3b:a5:98:7d:8e:
2e:8e:19:f4:55:b9:36:8d:90:d0:72:a1:91:81:5d:19:d7:10:
5f:f8:64:89:de:75:08:bb:bd:7c:ac:28:5c:ca:19:b2:39:2d:
f3:dd:d5:87:84:23:a7:50:a4:ac:2b:36:17:25:0e:76:7c:d5:
a2:e4:5c:d1:b9:24:34:43:00:6c:74:88:1b:80:55:0f:82:12:
c4:aa:a7:99:7e:f7:a3:e3:8b:b7:a2:fb:9f:42:03:44:00:00:
24:76:c0:59:01:cd:15:59:68:1a:62:ff:4e:ed:55:bf:c4:31:
35:32:a0:de:81:12:60:2b:a0:86:9c:8f:9f:05:2a:e0:8f:e4:
72:b3:c5:d1:9b:77:e3:15:ac:68:28:75:3c:1c:6d:66:a9:ea:
c5:e5:7a:16:c7:17:a3:99:bf:98:98:c0:07:d0:97:1c:ed:3b:
13:5e:66:a1:99:37:01:bd:0a:9b:da:1b:bf:e7:93:c0:a1:57:
d1:fd:15:8a:a9:12:71:db:90:de:8c:44:8b:24:2f:b0:98:d1:
f4:5d:cd:5c:62:e8:52:65:9b:d2:2a:2e:e1:30:0d:3d:ec:0f:
b9:e2:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:12 2025 by rpki-client