Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa
File: 0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa (raw, json)
Hash identifier: PYMCEQQEw/t+kMra7BrKoNfoKqf7Y40O4r8ThWhElw8=
Subject key identifier: 99:5D:5D:BA:15:37:8E:E9:66:27:E3:F6:09:48:F9:2A:C6:7C:BA:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F9072B2BDE8C3E3905EC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 98.209.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:07:2b:2b:de:8c:3e:39:05:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=afb5a0c0-4d4f-404b-b461-664144e63fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:ec:b9:77:ea:8a:b7:b5:47:9a:54:58:83:
c5:ad:7d:b6:5a:0f:23:cc:45:30:65:02:2e:d6:d0:
2d:96:f9:3e:7d:68:e7:ec:b8:33:b7:ab:73:db:39:
36:52:24:e2:5a:36:ed:e9:71:7c:ad:d7:f6:23:02:
87:1c:b3:35:5f:ae:23:93:12:f2:3a:78:d9:1c:4c:
4d:65:80:ff:0e:26:0d:d0:bf:c4:3f:46:b5:e2:2b:
db:5e:89:23:bd:73:1e:d3:c1:7f:a7:f4:b2:a6:2d:
c5:7f:6a:a4:1a:c0:7d:11:05:ff:64:65:e6:40:d2:
e2:56:66:d5:8d:c8:16:45:e1:9f:80:16:1a:8f:40:
3d:52:16:fe:67:ff:b5:00:89:b9:8a:23:19:73:be:
2e:fb:af:4c:75:7c:dd:c6:7f:4e:fe:e8:55:d1:80:
7f:10:48:b9:78:d0:f1:ab:f9:69:9f:0a:09:0e:37:
82:8d:79:11:24:29:2a:f9:b2:74:6c:2f:de:e3:a5:
c7:23:20:ed:b1:cc:9c:0d:3d:5a:17:97:36:f9:e7:
83:73:43:19:81:8f:10:a0:dd:7d:90:58:ae:73:7e:
e5:94:20:fb:2e:7e:0d:a0:49:03:67:66:73:7d:ea:
41:01:a8:35:24:32:ff:70:b2:63:72:75:f6:14:8b:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5D:5D:BA:15:37:8E:E9:66:27:E3:F6:09:48:F9:2A:C6:7C:BA:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:fd:1a:08:4b:9b:34:8f:3a:76:d1:ae:d6:40:d4:1c:97:80:
6a:aa:cb:44:aa:92:25:62:5a:2c:5a:63:8e:11:27:a0:47:cd:
4f:4c:c5:be:f4:ce:3b:4d:64:56:81:0a:33:39:8b:51:c5:c8:
08:3d:b1:ea:eb:2d:35:72:21:c7:05:cd:38:06:dc:81:10:40:
15:5a:89:ba:8d:2f:70:f3:43:11:e8:dd:35:16:43:30:7f:0f:
01:dd:d7:b8:88:15:db:f7:60:70:3d:4f:2b:09:01:82:26:3b:
a4:e8:f3:ed:e1:82:e0:fe:bd:ee:90:f3:f4:a9:b0:bd:aa:fe:
36:11:a9:ef:a2:17:eb:a8:53:9d:00:74:4b:ba:4b:38:5a:e0:
53:e9:76:16:13:e2:b3:fe:df:90:be:3d:96:39:39:36:f6:40:
11:40:f2:e1:fe:d5:e8:4c:04:3b:6b:a7:b0:27:f1:09:8b:61:
b1:49:fd:33:5f:02:50:dd:15:3d:cb:e2:db:d9:b0:e9:da:50:
47:d6:7e:3e:d7:22:b9:a2:4b:de:0b:4f:68:4e:71:64:01:84:
9e:a1:65:4d:1f:4e:f7:71:a5:21:4e:f0:d1:c2:a8:80:e8:c0:
31:91:3c:9b:39:f5:71:ee:0b:81:c1:16:7c:5a:0f:1b:c0:e6:
ef:8c:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:51 2025 by rpki-client