Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb76c1c8-f2d0-3da0-8f20-a9b462f2afab.roa
File: eb76c1c8-f2d0-3da0-8f20-a9b462f2afab.roa (raw, json)
Hash identifier: Gnw7E+HaILPlYQGibtLsjXTp8n//WgMWdM6GHm99INg=
Subject key identifier: AC:00:E5:51:1F:88:EE:3A:D2:97:B3:24:1D:9D:82:C0:4A:EB:7F:54
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130C4474295DA6FF712E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb76c1c8-f2d0-3da0-8f20-a9b462f2afab.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.46.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:0c:44:74:29:5d:a6:ff:71:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=862b9bb7-2a6c-4fd1-b738-6618ae6216ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:70:8d:f2:36:73:a3:fc:4c:39:79:29:6a:
79:81:a2:42:09:b7:fa:e5:5b:b8:c7:d3:3c:a4:08:
e7:a2:92:8a:de:8b:1f:a4:23:89:5d:07:da:6e:6c:
04:ff:98:93:a8:a2:2c:72:65:bd:f6:36:a0:b2:29:
b4:b3:b1:b5:ae:6a:36:bb:1b:1c:75:9b:87:f3:67:
52:82:e8:31:e6:c1:4c:ce:ac:cf:bf:d5:e2:60:f8:
61:0a:63:5e:d0:3c:57:1a:ff:49:a7:ca:73:31:d3:
8f:6d:ed:2c:f8:33:38:95:a8:5a:ba:e7:21:46:8a:
27:5f:99:79:c7:da:12:c5:48:d7:f5:40:22:bf:bb:
56:22:4f:ff:3b:ad:36:27:cb:71:c3:20:74:b1:32:
46:78:63:91:83:54:dc:a8:26:81:82:c9:2c:42:75:
2d:00:97:1a:42:2d:3a:31:19:f4:1b:29:d3:32:f6:
a6:88:b0:1c:c7:46:bb:45:74:8b:e3:a7:a3:fa:e9:
09:56:58:93:a7:e9:06:a7:e2:92:c3:64:c8:61:a3:
8c:4a:20:e8:9c:80:d7:69:30:89:74:52:29:59:f2:
dc:c4:e0:58:c8:a4:1b:1c:d9:19:ac:63:0f:6a:41:
0f:eb:68:f2:36:03:aa:7e:98:6a:6a:01:cd:ee:c0:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:00:E5:51:1F:88:EE:3A:D2:97:B3:24:1D:9D:82:C0:4A:EB:7F:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb76c1c8-f2d0-3da0-8f20-a9b462f2afab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.46.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a9:86:55:6b:4e:9a:9d:f3:b5:ea:2f:51:9e:6c:c6:79:e4:
04:49:2f:f9:c6:04:99:89:ad:58:84:ee:a2:43:08:01:a8:de:
27:69:76:76:a6:ac:06:43:30:e4:09:66:e7:d0:2d:c1:5f:64:
ff:c5:94:bf:02:4c:f4:9d:7b:08:3b:21:5d:86:56:cc:96:cc:
2c:e9:ee:76:95:88:fd:cc:77:5f:4a:8a:6a:52:9e:31:e5:4f:
eb:24:c6:96:2a:94:c7:fb:4e:93:0a:c0:d9:b4:31:95:f6:9e:
b6:23:e9:12:88:23:51:33:2b:af:69:e4:01:5d:d0:77:47:cc:
c2:b6:c6:40:35:7c:83:52:89:13:f2:00:38:10:f1:64:95:9e:
f3:ce:63:fd:a0:f9:8d:b8:fa:11:35:2e:12:9e:e6:04:01:8c:
aa:ca:ba:63:f5:f0:50:eb:dc:a1:57:e6:96:48:1f:3b:bb:b0:
7b:4d:df:f1:58:4c:6d:e0:11:1c:49:92:d2:d4:dc:1b:d7:8b:
e6:d4:8a:2a:56:7b:92:b1:f4:f5:c0:56:ae:76:ba:a8:7f:a3:
43:0c:a7:a1:b2:30:80:b6:62:48:8d:5f:6e:75:44:cf:41:45:
73:f9:40:53:5e:fe:4f:63:84:c8:9f:6f:21:6e:12:d4:2e:6d:
39:7c:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:27 2025 by rpki-client