Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4afe06e-f086-37d9-b507-6916a154eb02.roa
File: e4afe06e-f086-37d9-b507-6916a154eb02.roa (raw, json)
Hash identifier: fE9hTDD/xeK+/ww+3srzxFGgusf3IV3njkLahloNyKo=
Subject key identifier: 9C:2C:01:0B:44:D3:23:40:C1:8B:C5:D3:8B:FB:D7:4D:DA:8D:1A:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C8D854AFBA1A9AFF82080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4afe06e-f086-37d9-b507-6916a154eb02.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:8d:85:4a:fb:a1:a9:af:f8:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b4816ad3-e17e-49a5-a607-fd075d102777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:49:a0:0e:1f:98:fa:be:17:a5:51:83:75:
56:a5:06:f1:08:4f:fa:26:a5:15:c5:4a:82:fa:f9:
63:44:88:32:64:84:19:42:c3:02:9d:69:70:15:04:
bf:4a:a9:02:92:b3:67:7d:1c:3f:29:cf:da:90:87:
13:23:8c:fd:ac:fc:80:df:70:40:4f:2b:0b:51:9c:
eb:ad:9e:a5:28:a2:08:d0:58:1a:dc:19:d4:d0:4f:
cb:7e:9e:66:ff:f0:82:33:12:7b:6a:b4:83:83:55:
66:24:57:86:8b:9f:0a:e9:65:88:8e:b2:bb:43:18:
5b:26:b1:a7:92:90:d5:e9:df:aa:8a:a8:6c:66:e3:
c1:86:1c:44:a7:f3:c7:03:c4:9d:0b:b5:38:a9:cc:
08:7e:29:17:ed:8d:58:b3:e6:c1:b5:e9:a3:8b:18:
a2:94:f4:0a:4f:ed:a5:8c:13:92:2e:19:95:f4:6b:
ab:9a:ab:11:7a:02:97:12:06:48:f6:c6:c8:8e:0a:
1a:92:64:b7:2a:b6:46:84:8e:67:c3:00:f5:c5:fe:
36:27:43:78:4f:de:b1:52:06:d6:4a:82:05:30:3b:
e1:bb:40:75:52:72:96:de:1e:17:be:b3:e5:16:20:
51:30:91:b3:21:d7:ea:6e:2d:32:49:fc:3e:82:5e:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:01:0B:44:D3:23:40:C1:8B:C5:D3:8B:FB:D7:4D:DA:8D:1A:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4afe06e-f086-37d9-b507-6916a154eb02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:c1:07:7f:90:d0:ba:8f:a7:04:55:a2:e1:65:67:fd:40:44:
12:d3:ef:2b:e5:2e:8a:bf:fc:5f:5f:38:cd:d4:76:ea:26:af:
84:58:4c:f6:e5:5a:53:3f:67:78:56:69:87:b7:f3:56:ff:a2:
d8:9f:df:47:cc:2f:20:a0:3e:4e:7d:18:f5:3e:96:79:63:17:
3d:91:a0:08:d1:91:ec:02:b7:04:4c:bb:70:2e:89:d6:52:fa:
e1:3e:a5:a9:7b:bf:87:6e:38:9b:ec:15:b1:4a:32:bb:19:5e:
f9:7e:e3:99:ae:a9:3c:12:1e:4c:5a:6c:44:0c:87:8a:10:04:
66:71:3f:25:d5:2f:8a:c8:22:e1:ef:2c:28:65:5b:b5:c1:a2:
5e:5c:55:bc:da:76:de:f9:22:46:d4:ee:e9:11:ef:32:7d:cc:
6a:25:80:5d:fa:19:89:ac:60:80:98:fc:3d:2d:d3:04:e3:49:
8d:40:e1:14:94:cf:10:4c:b5:d7:06:c1:05:f9:19:32:b3:4e:
8d:9a:37:30:a7:c2:22:58:63:39:c3:5c:b5:20:ea:ee:c2:f0:
4f:78:ad:0c:91:8b:e2:eb:ad:d5:be:53:d0:b0:38:96:8c:8b:
75:64:89:ad:be:92:fc:e9:cf:e6:68:52:03:72:ee:64:8d:f2:
f4:2d:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:19 2025 by rpki-client