Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72be6e5b-9193-3cc6-8647-50bfa9949382.roa
File: 72be6e5b-9193-3cc6-8647-50bfa9949382.roa (raw, json)
Hash identifier: 7+0TUbuZd/AOBk05coEIf5nHVYqNxz1PnErPW5/T9dc=
Subject key identifier: 61:B3:8E:5B:AB:BA:13:52:06:31:A0:F5:09:3A:08:62:F7:66:51:BD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1E762E9F2ADBE445A7AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72be6e5b-9193-3cc6-8647-50bfa9949382.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.35.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:e7:62:e9:f2:ad:be:44:5a:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=52cc55a4-4ff5-4c36-886f-c51711215154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:9f:59:81:ce:54:d8:db:df:a8:9e:1f:ac:
88:de:33:86:38:3f:cb:53:97:6d:68:d6:ea:bc:3b:
d7:0c:99:45:37:1c:73:1f:ed:08:f6:b1:d8:ed:bd:
e1:39:b2:6c:75:85:a7:50:27:9d:d5:53:c3:73:8c:
26:90:a5:a3:d4:af:4e:2a:06:b5:f0:fb:a9:58:57:
cf:7f:e3:2f:e2:06:6d:0d:38:e1:6c:2d:1e:54:36:
5a:52:68:1d:24:79:0a:d0:45:04:3f:b6:3d:c2:4f:
44:e0:c0:98:82:e4:a4:17:b4:7a:8f:c2:0c:bb:7b:
7a:af:21:c5:d8:a3:04:55:c9:29:e1:e1:fa:89:94:
13:dc:b6:11:d2:98:7f:7f:f2:c7:28:cb:42:68:b5:
bb:1f:55:cf:98:63:d9:19:c9:d3:ce:03:79:2f:78:
c4:1e:d4:5d:a5:4a:10:d0:f9:cd:a8:77:d9:4e:20:
e8:a3:05:53:89:a9:f7:05:54:0d:4a:70:8f:a0:fa:
ef:e7:eb:61:7c:8b:71:9b:f9:7e:79:9c:86:41:bf:
5a:87:73:b2:14:ba:36:12:e6:20:b2:fc:6e:29:11:
3e:c6:f2:5b:4a:9b:67:1b:a2:76:da:ab:30:2f:bb:
1a:6d:07:c8:64:be:d1:2b:c8:e6:a9:68:46:84:5d:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:8E:5B:AB:BA:13:52:06:31:A0:F5:09:3A:08:62:F7:66:51:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72be6e5b-9193-3cc6-8647-50bfa9949382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.35.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:9c:aa:60:f8:1c:4f:3a:75:f9:80:77:5a:0e:8c:19:10:9a:
b3:84:3f:25:b2:a3:90:b5:c9:11:b8:4c:88:5f:99:a8:1e:7b:
56:10:fe:12:ce:9f:31:26:75:3b:7f:d5:2e:3f:99:ea:bf:59:
06:ff:c1:df:37:48:48:29:a4:46:a8:91:61:03:19:bb:46:4b:
ae:d7:01:98:47:c0:2f:78:64:1a:d6:89:a7:97:4f:50:5a:74:
39:84:df:b1:6e:a6:b7:9f:6a:85:25:8b:87:1a:7f:94:bd:42:
42:c6:89:e1:7e:a3:f1:a7:2a:8d:f3:13:b7:08:86:6d:ac:a0:
c3:d8:eb:6e:af:b8:50:60:b7:9b:f3:8a:8c:34:fa:db:1f:b8:
c7:53:76:34:ae:a3:eb:5b:3a:8c:8b:59:05:4d:dd:7f:54:d7:
dd:f5:fa:f6:1f:e4:d4:d8:6a:56:0e:43:cc:7e:78:0b:79:47:
66:45:eb:fc:ba:de:e0:13:41:63:20:ed:2e:1d:87:b8:47:4a:
0a:80:ee:4b:7d:42:56:f9:72:33:40:50:5e:7f:58:cc:74:7d:
8d:6b:d3:3a:1f:82:08:f7:78:dc:aa:9d:7a:3f:b1:3d:21:a1:
1a:9f:ca:92:37:cc:ba:50:c8:03:1b:0b:f2:4c:37:19:17:ac:
7e:e2:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:57:57 2025 by rpki-client