Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c5ed41-a359-3e5e-bb32-211a24cd7987.roa
File: 89c5ed41-a359-3e5e-bb32-211a24cd7987.roa (raw, json)
Hash identifier: r+KhtVgBBd5mnTbJFyu0YpXn24aCsGO7EFKLGcE80w4=
Subject key identifier: D7:27:F9:2A:C8:03:C2:23:2A:DC:1F:23:8A:68:DC:0E:5A:AA:B3:5F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFCB447BE99E65EAD1F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c5ed41-a359-3e5e-bb32-211a24cd7987.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.227.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:cb:44:7b:e9:9e:65:ea:d1:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=713c668e-6256-4f55-9ebc-d907311ad6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:1e:10:40:b5:d5:3a:55:77:25:85:76:bc:
eb:d1:27:41:fd:6b:fc:81:76:ec:42:0d:37:d3:c7:
fd:49:8e:0f:62:5f:4a:6e:b4:02:23:0b:95:b8:b0:
db:68:19:8e:d1:e7:81:61:1b:0a:6f:57:44:a8:f5:
1d:44:dc:e3:c8:9d:1f:63:65:36:65:39:86:dc:c0:
f4:21:2c:bf:03:77:9f:4f:3e:fe:bd:35:08:16:5f:
a0:3c:70:eb:18:cc:f8:23:ef:02:f3:0f:60:c6:3a:
a2:fb:b5:bb:99:2c:83:1e:bb:c0:10:e8:a7:23:9e:
fa:c5:73:f5:1d:6c:d2:9d:c5:a0:40:13:6c:88:d8:
39:4b:55:2a:cd:a6:4d:3a:2c:78:f4:57:4d:89:b5:
ba:4b:6e:18:9f:39:2f:ef:0f:b9:63:13:49:e1:db:
31:6d:a0:e6:bb:14:ae:a4:f9:91:c5:35:1a:9c:18:
dc:60:a5:66:5f:15:bf:d2:f1:60:da:a0:ef:81:f1:
0a:79:23:0f:9f:41:1f:4d:01:a7:06:40:c5:08:67:
2b:02:1c:cf:40:b9:36:94:a3:37:42:15:47:68:f1:
b7:c1:99:aa:ec:53:15:f9:73:df:5a:cc:65:bf:e4:
e5:8e:93:8d:ea:1d:88:fc:fe:ed:33:c9:86:d8:04:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:F9:2A:C8:03:C2:23:2A:DC:1F:23:8A:68:DC:0E:5A:AA:B3:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c5ed41-a359-3e5e-bb32-211a24cd7987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.227.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c0:a6:9a:58:9b:18:f7:30:95:fc:81:9b:0e:b6:74:dd:50:
8a:be:f6:f4:29:ca:9a:4a:55:42:15:70:dc:db:49:28:57:73:
d2:45:20:51:ad:aa:9a:bf:bb:b4:f2:f5:53:f5:5e:cf:56:f8:
ed:7b:2e:47:0f:af:5e:c2:5f:91:9c:b3:e6:ad:0b:2a:f0:99:
e7:21:dc:f8:5e:49:23:76:bf:ca:51:9e:cd:f3:2a:2a:86:14:
32:4b:fb:58:08:23:f7:72:ce:d0:56:ef:85:ff:91:e2:a9:10:
3b:7c:88:d6:d9:12:7c:d3:fc:78:03:c3:4f:98:e9:44:45:81:
ce:11:ec:fa:02:6c:44:a0:ec:33:f7:69:b2:64:87:df:1c:bc:
d6:09:bb:61:35:f3:92:9e:f9:12:1a:61:1d:55:07:48:4b:e5:
e7:0c:ca:58:51:61:7d:0c:40:8e:c9:82:78:cc:12:cd:32:e0:
db:4d:b4:9a:d7:e6:41:45:2b:6b:eb:f1:4c:2c:5d:95:b6:99:
1b:fb:be:7b:62:dc:97:5c:cc:31:1b:7c:70:4e:d6:4d:7d:4e:
5e:1f:17:ba:b7:91:c2:70:3f:e1:e8:5f:94:04:b7:42:2b:da:
08:4d:00:bf:8c:1e:4f:fe:ad:20:aa:6b:01:94:d4:8d:96:4b:
9f:a4:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:46 2025 by rpki-client