Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f993b90b-2832-383f-be60-3aa9898d030d.roa
File: f993b90b-2832-383f-be60-3aa9898d030d.roa (raw, json)
Hash identifier: bxBrRCkS71mLg9lzkwE4ribZiQnlkFh2X6nOMkoMXF0=
Subject key identifier: 17:8D:65:D4:CF:41:7B:88:7F:C9:CF:2B:6E:B1:9C:ED:F3:64:9B:FB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C8F189CBEFE64BC0749C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f993b90b-2832-383f-be60-3aa9898d030d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.200.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:8f:18:9c:be:fe:64:bc:07:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9b44713b-6d9b-49ad-a3fc-d41f1cfacc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:34:ca:0a:08:8d:e4:cd:cb:ee:a4:6b:36:
f3:d8:d0:3c:f6:d2:fb:f3:a2:db:78:cd:04:3f:84:
81:48:a7:af:ee:d9:8b:42:a3:a5:98:22:3d:3b:32:
df:14:c0:4a:d2:0d:32:fa:ac:7a:13:ce:7f:1d:9e:
ce:e9:03:21:88:92:5c:1b:46:f5:7b:57:99:ef:be:
13:85:85:56:6c:47:81:c8:e5:7c:b1:52:71:1d:19:
2d:ae:e8:df:ac:c7:09:08:e3:2e:02:0e:93:1f:01:
8d:08:5c:75:35:3c:65:00:37:fa:79:3d:17:8c:83:
af:24:92:bd:c2:26:9b:6f:14:c2:d8:5f:e9:5b:cc:
61:1f:96:7b:fc:4f:3c:cf:53:18:d6:0c:1b:a4:dd:
61:d8:24:e7:3a:e2:6d:fb:6a:86:55:e4:c7:a4:10:
4d:fb:bd:b6:0a:17:a2:dd:61:9f:db:21:c6:7b:99:
11:23:3a:83:c0:3c:d9:6e:62:25:6a:16:d9:ca:c1:
0e:02:4f:b1:22:b0:a3:d1:98:b5:b6:0e:54:a5:f9:
cc:21:4f:7f:49:e9:8d:f4:6e:8e:f3:4a:56:3f:37:
bf:6d:6b:8e:1b:bc:67:a9:4a:37:72:7e:eb:87:11:
86:9a:13:ad:3b:cf:d8:9a:c7:e2:c7:04:d4:ab:29:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:65:D4:CF:41:7B:88:7F:C9:CF:2B:6E:B1:9C:ED:F3:64:9B:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f993b90b-2832-383f-be60-3aa9898d030d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:93:94:51:fd:5c:e7:5d:8b:9e:22:f6:68:d2:c5:26:ef:dc:
2a:b9:85:d0:1a:2a:f2:e4:2e:97:da:c0:f7:dc:ec:e2:12:33:
11:91:e5:da:4e:6f:bb:5b:8e:f3:ed:ee:35:fb:09:00:22:e4:
20:b5:fe:c5:22:a4:6d:80:ea:d8:ef:f3:57:44:73:09:88:06:
43:7a:4e:1a:3e:e7:7f:fd:01:4c:43:ac:57:6f:c2:fa:0d:e9:
0a:be:15:7a:82:3b:63:87:e1:f4:ca:65:49:06:fc:38:8c:bf:
a9:14:70:f9:c4:af:40:29:4c:8d:fd:a6:ae:4c:76:be:ad:37:
35:8d:f8:64:79:b1:14:25:3e:38:03:ec:ea:e8:40:a5:01:46:
60:ab:a4:a0:fa:0b:37:81:d5:0a:10:b6:ab:c1:f7:1c:54:d1:
2b:23:fe:73:1a:b6:01:03:ba:3d:22:37:35:f0:89:75:c3:f6:
ac:6a:a8:b7:0f:7e:b1:48:64:4d:99:96:25:28:c9:e5:59:dd:
38:0f:a4:5f:e0:5f:60:35:2f:5b:5b:9d:6c:d5:37:cf:a0:43:
fa:86:1e:fd:45:27:41:5a:63:7c:d2:85:4d:67:4a:0e:7d:33:
8b:20:fb:19:78:e2:5e:86:55:93:77:bb:8a:99:38:31:45:d1:
9f:84:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:17 2025 by rpki-client