Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5972bf-9df2-3895-8d47-fdc2cfa8be61.roa
File: 3a5972bf-9df2-3895-8d47-fdc2cfa8be61.roa (raw, json)
Hash identifier: vIoI0Y2DC05y/AMG5inE5wrSxRMNXv2Ry8lcoY8kSaI=
Subject key identifier: C6:61:A5:3B:24:F6:0B:05:F2:99:DE:B4:82:E3:3B:E7:80:9A:71:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CC16C10AFE5D73E8F8B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5972bf-9df2-3895-8d47-fdc2cfa8be61.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.252.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:c1:6c:10:af:e5:d7:3e:8f:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=5bcc4a9d-637b-4464-b50c-d4a33c3db98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:af:a1:64:54:17:13:4e:d6:48:0f:79:2d:
e6:4e:4d:e8:17:fb:57:47:2c:d1:12:0e:92:6f:11:
dd:9c:73:5f:25:5f:90:07:06:63:33:c4:20:c8:49:
c7:4a:ed:f4:3c:16:fb:3f:98:16:e4:61:33:f2:47:
60:70:1f:49:7b:aa:51:af:3f:bc:74:f7:16:6f:74:
d2:73:58:19:26:ea:c4:34:11:f4:3e:7c:c2:01:3c:
f5:de:f0:5e:c5:2a:18:29:ae:7a:f7:12:cb:a0:c4:
a1:ff:32:7b:ca:0f:0d:ba:66:fb:84:c7:9d:5e:38:
fc:34:f3:3e:aa:79:28:99:49:5b:46:33:63:86:29:
63:37:05:01:5f:b6:6b:57:71:97:9e:f0:e9:66:6f:
16:95:94:90:81:0b:9f:4a:b6:46:b3:2a:c1:35:20:
7a:5a:af:53:3c:bc:60:17:27:58:c1:8f:b5:3f:9e:
25:99:af:95:8e:d0:05:75:5f:dc:7e:df:83:d1:5e:
d5:e1:09:4d:fd:41:89:14:cb:aa:37:f8:46:b5:b8:
c4:1e:b3:29:1a:de:53:44:10:00:9f:5b:f4:0d:ac:
a7:c3:8b:35:c6:9b:5c:37:4b:0d:4d:f5:58:b1:9a:
72:06:0e:41:53:f9:0b:3a:f8:02:23:11:84:90:dc:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:A5:3B:24:F6:0B:05:F2:99:DE:B4:82:E3:3B:E7:80:9A:71:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5972bf-9df2-3895-8d47-fdc2cfa8be61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.252.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:8d:4c:39:43:ad:e4:50:6b:39:bd:d7:f7:d0:2f:31:a4:3e:
cd:ef:7d:a1:67:16:0f:3d:2f:43:19:24:c4:4c:4c:7a:ba:9a:
32:47:f8:13:91:c2:4c:5b:93:a8:28:c1:6d:4c:d9:a7:3f:59:
57:2f:96:a8:c0:ca:9b:c2:7b:46:27:db:23:21:a4:ee:de:11:
2a:32:c5:4a:90:49:b4:bc:0a:f9:a4:7a:ea:1d:7c:6d:a0:f8:
83:00:d3:82:cc:b3:bf:1b:be:8b:7f:dc:2d:7b:3b:9e:82:c6:
1e:b1:31:dd:22:48:48:52:14:a9:19:b5:e3:f7:d5:ae:15:70:
3d:98:98:70:30:c2:ae:99:d2:05:f7:26:bd:4d:6d:48:b5:b4:
b6:6d:3f:2e:ce:f1:ba:43:27:32:c7:ef:8b:0c:14:a3:44:74:
f2:d8:4f:77:73:82:43:06:35:2a:0a:11:4c:83:01:5d:dc:6f:
75:a7:e8:08:82:f1:77:60:71:7b:b7:ae:72:a2:f6:1f:e6:c2:
9c:a9:89:f9:e9:bb:a2:57:04:da:48:53:68:df:93:d1:27:a5:
72:15:74:60:2b:51:2d:24:1e:1d:01:24:5f:c2:70:84:b5:a9:
6e:3d:0d:e0:5d:b1:90:c8:bc:da:fd:68:b7:02:9f:9b:8d:8f:
a6:26:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:56:28 2025 by rpki-client