Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2de2239e-2378-304f-9aab-7936f43c1473.roa
File: 2de2239e-2378-304f-9aab-7936f43c1473.roa (raw, json)
Hash identifier: ZsKpmOXhlQ+ISBYDeua2aBbRGFBz63pbGzdHSsZcTbE=
Subject key identifier: 83:48:F0:AD:1D:E3:DA:06:A9:A6:3C:7E:85:5F:3E:20:31:E1:1F:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7D3B184BE9C5259A27F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2de2239e-2378-304f-9aab-7936f43c1473.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 98.250.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:d3:b1:84:be:9c:52:59:a2:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=94fb3613-f1c4-4fc7-8d5f-e0d258dbcc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:ec:9b:1c:3d:6e:c8:30:04:61:0c:e8:e7:
cb:81:c6:b9:2b:2f:9a:b5:4b:4c:60:dd:f1:9a:49:
c6:7c:3a:b8:d5:08:e9:24:e5:fb:03:f0:7b:95:d0:
12:1c:3c:39:86:dd:b2:5c:b0:69:71:e8:b3:04:59:
b4:01:91:4f:96:01:5f:01:3a:fa:e4:f2:b7:34:71:
c6:bf:c7:1c:cf:ec:19:c3:21:cb:a1:2e:04:e1:a3:
1c:e4:50:b7:14:f2:db:d4:5a:50:3d:a5:a0:f8:6b:
82:0d:b6:b4:cf:5c:26:03:c2:6d:80:2e:47:52:d8:
b8:6c:2c:5b:df:a5:58:db:b6:c0:cb:fe:12:25:29:
f4:ee:d9:de:02:81:e2:b9:33:82:69:68:11:ee:76:
c4:d8:c8:22:f2:ad:79:4d:b3:f3:f3:01:af:8c:40:
c2:74:2f:b9:9a:07:e5:14:b1:27:11:f1:25:57:67:
a4:21:22:cc:8d:66:88:30:10:d2:bb:cf:8f:82:8c:
d1:fe:28:1d:7d:53:a9:f0:c5:88:9c:f5:d3:d2:c7:
ff:6b:f7:cb:40:e2:59:aa:3a:13:f7:d5:66:2b:d1:
7d:aa:5f:24:b3:be:8d:62:60:32:30:dc:2f:53:6f:
f7:70:3b:36:56:17:5d:5c:bb:40:95:d6:4b:05:ac:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:F0:AD:1D:E3:DA:06:A9:A6:3C:7E:85:5F:3E:20:31:E1:1F:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2de2239e-2378-304f-9aab-7936f43c1473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:fa:c4:57:35:ce:ac:6d:3f:b4:3e:f3:09:71:ba:44:00:e6:
4d:1d:73:ab:aa:7c:4f:8b:0f:46:40:fd:22:9f:87:fd:46:f1:
af:64:74:9a:3c:56:f2:f1:1c:cf:da:92:a5:e8:3b:df:22:8e:
16:c8:02:fe:e0:4d:e0:bf:fc:ff:a9:fd:b1:1e:8c:d1:21:26:
ac:b3:39:07:83:62:ec:05:aa:d4:a8:f4:64:ea:24:60:ed:2e:
e2:74:6f:15:8c:b7:58:b0:36:a0:62:70:7d:4e:70:a4:2b:5a:
f4:fd:55:01:9c:1a:7e:d6:50:c0:19:d4:c8:e1:29:06:19:2d:
f1:16:f9:c9:99:0c:22:8b:74:c8:b2:91:68:c2:ab:64:2e:e5:
17:d4:d2:e9:35:1d:c9:a9:21:47:7b:fa:c7:3b:f9:b2:04:d5:
49:56:3f:73:40:47:14:c6:8d:78:5f:e0:c9:bd:6e:15:99:d6:
f4:2a:41:0e:92:df:d0:52:fb:04:8d:b8:21:f5:d2:22:8b:a7:
e6:9b:a5:6d:5e:81:93:ab:4a:46:62:85:8a:b8:f9:73:51:2e:
05:94:cd:f6:2a:40:75:ad:9a:0d:39:af:8b:99:7a:fd:6a:76:
e0:02:bc:ec:7c:9d:1b:e2:c3:88:ee:00:25:b4:bb:ad:cb:b6:
56:7d:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:33 2025 by rpki-client