Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa
File: d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa (raw, json)
Hash identifier: 5TIBZM8wJBJgY845E6YwH0en8j3+f9AKN3fUwLeChkA=
Subject key identifier: AE:95:84:B8:3C:B1:AF:B7:91:EC:CF:99:C3:D7:AC:79:8B:2E:A3:CA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C6407619001A8BB3B7300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.197.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:64:07:61:90:01:a8:bb:3b:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9db81392-a95a-4327-9722-f787e5b05c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:db:45:eb:77:fd:64:84:ce:01:e5:fe:88:
bd:e6:19:93:7b:64:58:68:3d:71:7e:d6:99:d0:6f:
1b:ba:ff:f2:1e:8b:f9:07:f4:4e:29:60:f6:10:5d:
79:f1:bf:d9:8c:92:5e:b4:ea:8e:f9:5b:9e:9f:af:
ea:0e:5a:01:f9:96:28:5c:c3:2d:12:83:c2:1d:57:
1e:ca:f4:04:96:a6:b7:8d:25:41:e3:a5:34:82:1a:
ad:5f:13:23:97:4e:7b:cd:a2:fa:4d:59:e6:7d:92:
76:f3:bd:dd:46:bc:c4:7d:15:25:b0:58:20:d4:9e:
5d:63:b2:58:37:c1:f9:f4:77:2c:90:cd:67:88:aa:
e9:d8:48:5b:06:34:6b:9d:16:22:5a:7a:8a:49:5f:
a8:d8:8a:a4:2a:e8:be:3c:66:3f:74:55:96:a7:b7:
ba:ea:96:98:77:18:05:85:5f:33:d1:6d:b3:f8:32:
5d:5a:4e:08:be:dc:46:a4:d7:a4:28:e0:12:0c:01:
82:93:d4:de:f3:dd:8c:6c:39:19:af:31:b7:6f:7c:
ba:19:30:f9:aa:37:82:bd:8e:0a:3d:ac:42:c9:47:
05:aa:cb:d7:ab:5f:67:f4:3a:1a:ab:67:1c:76:65:
94:8f:94:65:b3:03:dc:30:58:f3:90:0e:9d:8f:fa:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:84:B8:3C:B1:AF:B7:91:EC:CF:99:C3:D7:AC:79:8B:2E:A3:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.197.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:71:4e:e7:63:32:02:bd:fe:61:6d:bf:3e:71:fd:2b:0e:d5:
9d:45:29:7d:85:0f:c2:ac:16:9f:68:2f:25:d2:f1:62:5e:66:
62:ee:83:fd:05:d4:36:6c:35:43:c9:ce:e9:c1:63:71:62:db:
13:76:19:f6:0c:45:31:5b:33:18:23:6a:ea:63:f0:fa:9d:93:
85:ee:bb:b6:86:44:74:16:d6:78:f4:35:0a:46:d1:84:45:76:
01:90:ff:e9:3e:b0:11:10:7e:c7:43:f1:b0:ea:c9:77:38:f1:
7e:9f:97:d7:d3:1f:65:47:8d:0c:66:ec:19:23:18:27:ab:03:
a9:9a:16:2d:44:1f:7a:57:23:3b:92:0a:57:34:b2:9f:08:ed:
a0:3f:17:24:c4:3d:b1:f6:dc:f3:81:ec:d1:b7:e8:93:5f:6b:
39:9a:2a:8d:5e:e6:c1:29:d2:db:05:7e:50:b1:cc:e2:48:4f:
a3:c0:8a:35:89:e8:69:66:c9:fb:72:0f:82:c6:0e:d5:85:9e:
63:ac:a2:ad:13:2f:cb:8e:f1:f2:0c:80:34:58:5c:bb:d4:87:
b5:bf:f0:a0:4a:db:4c:ae:a9:29:57:5d:58:59:c5:ba:d4:c4:
2a:15:90:6a:ec:9a:c8:8f:9b:91:fd:f5:39:11:05:67:31:65:
86:92:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:32 2025 by rpki-client