Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa
File: 3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa (raw, json)
Hash identifier: kJWKY7xDBcip0Fv6CcbPCpYEKG4yahj3Q384Po/It7M=
Subject key identifier: 6C:F3:10:E4:35:6D:D5:D5:5A:87:8D:8F:18:C1:2F:99:9B:1B:98:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F81085E8341F2E72D64760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.200.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:10:85:e8:34:1f:2e:72:d6:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d8b6661b-b7d2-486a-b51c-084019c17479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:20:d1:1c:6f:e6:83:3b:9f:25:d3:6d:eb:
79:a4:71:48:e6:e3:7d:ad:2a:2a:7e:4c:6a:68:9f:
6b:1a:6b:32:ee:48:e8:26:84:b4:d6:40:e9:ae:13:
94:c2:80:52:d1:2e:85:0b:a9:c0:68:8b:7c:3b:fb:
42:a8:dc:78:bb:03:7f:ca:a2:a6:c4:3f:20:54:08:
71:3b:f1:e8:17:15:db:76:ab:65:30:1f:f7:5a:09:
c1:54:a9:2d:4a:02:6b:67:40:3e:f4:3f:43:c7:ac:
24:6d:de:8a:03:c1:2e:19:d2:28:f7:13:82:f9:12:
76:cb:9e:6c:48:e6:7f:d4:57:3b:b1:9b:c1:1c:0f:
e7:d6:0e:16:98:69:c9:69:66:d7:e4:b5:ca:cf:54:
fb:cc:bd:5f:f3:f5:55:0e:96:9f:03:81:e6:d2:20:
dc:95:99:ed:84:03:c5:23:be:da:ee:3e:71:83:f5:
5c:86:56:0a:88:6d:fb:54:0c:51:5a:a5:e7:61:c9:
5c:e7:29:3e:e2:90:8f:ce:61:eb:35:6d:47:b2:de:
94:99:07:21:72:42:cc:c3:4a:70:06:6d:b5:61:13:
02:c7:33:d9:7c:29:c5:b5:d0:85:bf:73:3d:57:05:
8f:f0:6a:dd:eb:54:0d:c1:cc:0c:6d:aa:1e:07:4b:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:10:E4:35:6D:D5:D5:5A:87:8D:8F:18:C1:2F:99:9B:1B:98:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.200.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:78:80:a4:e2:8c:89:78:19:e1:c5:0f:7e:95:83:ac:93:cb:
7e:77:96:9c:38:d2:3c:6f:ae:db:40:f7:59:d7:72:6b:56:05:
e7:6a:d4:60:08:ca:e6:c1:8a:e2:b5:5e:d6:7e:9e:ea:6f:ac:
78:3c:a2:8c:3e:37:f8:27:e1:c7:70:72:55:20:98:cf:35:98:
15:b5:73:75:1d:6f:33:cd:e2:f6:2f:f2:b2:06:02:de:c2:3b:
9f:cb:3c:ca:62:bd:1a:6d:33:75:e1:31:a9:e1:93:91:6c:1d:
9b:ac:b5:9c:db:1e:d6:f3:e3:1a:25:34:06:f7:5f:8e:37:6e:
23:d6:66:cb:cd:b5:6e:7d:ec:23:e4:f3:a4:97:f0:a4:73:a8:
4e:87:4c:25:27:aa:dd:5d:b5:0d:39:57:7a:ba:a6:1e:54:e5:
55:cf:5f:45:1f:8f:68:d9:af:5e:c8:13:2f:42:6d:8c:eb:bf:
95:01:44:4a:93:b3:d5:4f:88:8b:b0:8f:65:b5:4e:2e:6a:8f:
3a:77:3f:ae:46:8b:cc:d7:cb:8b:34:83:73:93:28:2e:61:9a:
ae:57:d8:92:9b:0d:06:35:dd:c3:8b:60:71:f7:c8:60:10:e6:
db:35:6f:96:43:4b:43:67:f2:a8:9d:96:e9:c5:b9:77:36:8c:
9c:df:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:40 2025 by rpki-client