Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8649f7e6-a7c6-3638-8b44-20aa749137eb.roa
File: 8649f7e6-a7c6-3638-8b44-20aa749137eb.roa (raw, json)
Hash identifier: nLXwNk/hpOPLwurrp0IFN9I6LM5GhRu9eWWGC+/hg5w=
Subject key identifier: 4B:5C:C6:DC:42:68:28:20:97:A8:DB:83:26:7D:8E:10:FF:AD:3D:5D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C5A8C00BC0BE4137B6C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8649f7e6-a7c6-3638-8b44-20aa749137eb.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 98.251.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:5a:8c:00:bc:0b:e4:13:7b:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=b9168ac5-e1fe-4d68-bcd1-334a32f36042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:38:1e:b9:52:c0:8e:00:88:2e:a2:5c:13:
3a:93:8c:fb:d9:5b:37:8a:dd:19:b2:23:57:ef:7c:
3b:52:51:c4:74:8c:38:f0:04:8e:7c:ca:f1:f6:6c:
50:b7:19:50:af:e5:c2:b7:72:ff:bd:68:f1:7d:c1:
96:a1:1a:93:a0:99:f4:16:2b:3a:1b:c6:c7:4a:2d:
93:4c:6b:1f:46:69:26:07:02:78:d0:0c:ac:8d:9b:
da:e5:b6:db:77:44:0c:27:86:10:0b:1d:a5:f4:2f:
d9:79:52:ba:55:8f:ca:62:25:c5:41:63:84:7d:19:
94:d0:21:06:1b:7f:0f:3b:45:b6:fc:f6:8f:c7:5d:
e6:b4:e9:58:33:fe:21:1d:8a:a8:a7:60:6d:a1:e8:
62:df:6a:4e:8a:7e:9f:18:6f:ed:b3:9e:f1:3a:7a:
a9:f7:4f:64:ed:10:d5:f4:34:4e:20:c5:f8:9a:5d:
ab:4e:54:f3:a1:54:3b:17:4c:71:a7:fb:cd:4c:cf:
95:60:6d:a0:1c:ee:70:8a:a5:52:e6:38:51:d4:0f:
31:b6:25:01:81:03:b6:ad:a8:54:2f:c0:92:c0:fb:
84:6d:83:57:fb:fe:01:ff:75:63:9e:4b:7e:bd:80:
c7:72:f7:bf:a0:a0:b6:8e:2a:4b:65:b7:6e:a5:62:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:C6:DC:42:68:28:20:97:A8:DB:83:26:7D:8E:10:FF:AD:3D:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8649f7e6-a7c6-3638-8b44-20aa749137eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.251.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:90:d1:37:53:30:87:f7:ff:92:6f:fc:5e:a4:35:d1:06:30:
83:89:1a:32:78:7a:26:2f:b4:67:8b:53:aa:08:02:bb:87:26:
96:bd:96:6f:a3:bd:f3:c5:6a:e0:9c:71:0f:c3:cf:ca:71:53:
74:fa:bc:89:60:b1:0e:ae:7e:ee:b7:65:f7:5f:ca:bf:6d:9e:
17:49:ab:fe:fc:42:18:45:a7:b0:9e:3e:f1:ae:db:6a:3d:cc:
cb:e7:1a:ee:4c:f6:f4:35:e0:3b:12:29:1e:1a:0f:13:89:41:
f6:95:36:86:18:4d:e9:52:ba:ed:0b:94:d1:e5:0a:37:4a:47:
a1:2e:dd:9f:f3:e5:c1:67:14:2e:17:8b:05:0f:57:be:aa:54:
38:c2:37:4d:47:2d:2f:3e:c6:64:b6:e8:fc:16:a3:1c:f3:96:
06:1a:e4:41:41:a6:ba:75:6d:0e:5e:3f:cf:e6:c2:8c:c0:f6:
0d:68:8f:1e:02:ab:94:97:fb:47:0a:06:c5:2a:c9:7c:c8:c3:
b8:f7:e4:2e:e3:5c:9d:27:73:9b:e9:4f:4f:ca:b0:1b:5c:e0:
7a:71:d0:4e:ee:52:5c:10:ff:78:5a:00:3d:49:1f:68:25:b7:
38:a3:a7:ca:eb:38:da:44:a3:49:b0:a6:d5:e3:31:5a:5a:7e:
51:1b:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:33 2025 by rpki-client