Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a2292a-e8bb-3f85-b350-0fdc21f31299.roa
File: 21a2292a-e8bb-3f85-b350-0fdc21f31299.roa (raw, json)
Hash identifier: ges838hX84vNl2uaN8mxwzGeZqxwWJiJbTTkPkf+IQc=
Subject key identifier: 91:27:34:A1:82:0C:B0:CB:EC:EC:F4:1F:FC:88:B9:CF:90:E8:F8:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB158E5775DF09EA2683178
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a2292a-e8bb-3f85-b350-0fdc21f31299.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.222.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:58:e5:77:5d:f0:9e:a2:68:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=eb226cff-5e14-43e0-8112-959638865454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:c9:ce:15:70:19:77:bb:d3:5a:74:0d:3b:
a0:b7:d7:fc:53:df:0b:0e:22:fb:c3:61:06:ae:9b:
82:eb:b5:e6:ed:d8:8c:f9:db:40:58:5e:f3:72:02:
ba:eb:b4:4c:0b:a7:67:44:32:b6:7b:65:67:a7:58:
23:31:06:f1:e5:cc:4e:31:91:73:a1:07:60:37:ed:
98:b6:52:77:28:2c:9c:05:9c:8f:f5:7f:80:74:07:
4a:d8:bb:b6:9d:9d:57:35:f6:aa:40:58:4c:12:35:
0c:ce:7c:06:7d:1d:78:bf:7a:3a:f1:9e:57:06:de:
13:fb:00:91:86:fc:bd:07:94:8f:1e:f4:90:e2:42:
19:7b:d5:12:ff:6d:87:e2:7d:29:ac:29:15:c5:64:
65:aa:8e:9a:5c:aa:17:7e:79:c5:49:22:fc:11:d7:
b8:ea:c8:84:5c:d6:56:8e:d4:f6:a5:db:32:eb:17:
c8:a0:e5:8c:a8:2d:c1:57:e6:90:83:ec:94:24:9b:
99:5e:43:7c:13:88:91:b6:f9:c4:d0:1a:1d:40:a4:
cc:f2:04:87:21:cc:5d:66:9c:31:f5:9d:1b:31:28:
88:a9:1f:18:bb:89:b6:df:9b:8d:ed:00:bc:6b:3c:
5a:ce:25:b7:4d:15:27:bb:b5:71:b1:56:68:27:73:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:34:A1:82:0C:B0:CB:EC:EC:F4:1F:FC:88:B9:CF:90:E8:F8:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a2292a-e8bb-3f85-b350-0fdc21f31299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:60:c4:23:5b:be:67:ef:d1:cd:ae:62:73:56:8a:f6:14:cd:
f3:a4:d7:39:f3:ae:1a:1b:c1:45:58:66:e8:99:cf:bd:10:b4:
38:0f:8b:75:e4:12:06:85:11:09:85:28:39:f6:99:65:3d:93:
19:c8:54:04:46:d5:ad:47:ef:a9:bf:27:a4:1c:31:db:6b:f1:
68:3d:01:9f:f9:86:ab:81:07:bc:a8:b0:45:a4:e2:5d:10:bf:
96:43:2a:cc:ba:53:3c:91:df:1a:bd:7d:98:ac:a1:5b:bf:c6:
81:5e:da:c8:86:1a:06:ac:ba:84:93:bf:db:7d:66:14:cf:cd:
16:d0:64:05:5e:1e:4d:48:fa:db:15:07:cd:7b:31:43:10:2d:
05:c8:7e:29:41:bb:42:66:6a:77:a5:b4:13:a7:1c:09:2a:35:
1a:ef:06:78:bc:bf:90:f6:5c:65:0b:f0:6a:70:ef:e8:e9:0c:
8e:19:b0:a9:49:6e:c8:65:8b:9c:8d:bb:21:4a:e6:af:e4:ce:
06:c2:33:5b:cb:97:21:dc:e0:a2:7f:b9:66:b2:e4:44:dc:6b:
91:79:c5:85:b8:79:a9:45:ac:51:1c:5e:06:21:40:60:1c:76:
a2:68:01:0e:f4:6b:80:05:ee:66:c1:bf:3e:50:9b:27:fd:7c:
7b:7e:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:15:10 2025 by rpki-client