Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c05bc8c-8e5c-321e-a4a2-ee6a6efafeb0.roa
File: 8c05bc8c-8e5c-321e-a4a2-ee6a6efafeb0.roa (raw, json)
Hash identifier: pC/eERoyYq9X1VhZH5f1o4We6np5DNiNFGuGsoqiiBU=
Subject key identifier: C9:83:A0:44:67:35:4E:B3:90:A1:52:06:27:47:E7:D4:1B:EB:49:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F970BF36BE5AA9B99B3D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c05bc8c-8e5c-321e-a4a2-ee6a6efafeb0.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.57.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:70:bf:36:be:5a:a9:b9:9b:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1cd85185-d4d2-43f9-a52a-9a1716fdd631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:ff:96:26:47:51:1c:09:4e:e2:19:9a:9f:
f4:40:dc:d6:08:8a:1f:6f:f7:fa:16:e4:5d:db:2b:
f9:3e:de:7f:12:74:61:34:02:b1:9d:24:74:fa:7e:
0c:d7:76:7c:c6:00:00:3c:5c:d6:de:0d:98:3a:e4:
44:93:36:6b:e9:6f:08:ab:e5:83:e2:84:b4:7f:dc:
49:23:f0:f0:fd:42:2c:9a:dd:ef:d7:6e:eb:e3:3b:
d0:5b:90:ae:e4:52:98:c5:35:b2:0b:4c:96:dd:32:
9a:06:2f:05:1b:29:a4:09:23:22:3f:1c:dc:4d:21:
87:29:ab:47:0d:ef:76:cf:60:2b:b1:2b:b9:71:f1:
4d:dd:6d:66:3a:01:70:6c:21:eb:68:95:c7:24:12:
dc:88:e2:98:38:0d:4b:e9:52:37:70:85:41:1c:53:
36:34:30:11:49:0f:af:7b:a6:48:64:59:9c:55:f5:
ce:d9:95:ea:94:29:9d:9b:25:0c:bf:27:cd:be:7b:
95:df:ec:f2:83:6d:ef:a5:53:b3:7a:90:d2:fe:12:
d7:b6:1a:d6:ec:8a:be:5a:6a:7a:81:7f:69:1a:36:
d4:f6:02:ab:ba:d1:d0:1d:62:84:84:10:72:36:aa:
26:0f:ec:e4:16:8e:47:8d:54:2e:fd:5f:06:cc:39:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:A0:44:67:35:4E:B3:90:A1:52:06:27:47:E7:D4:1B:EB:49:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c05bc8c-8e5c-321e-a4a2-ee6a6efafeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.57.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:be:e1:4c:a6:15:57:6d:45:5c:95:05:81:00:6b:a0:b7:28:
ab:14:ed:b7:af:48:f6:4a:8b:d8:30:34:2f:2d:12:9d:5e:44:
b6:ae:86:a4:a1:57:df:74:a7:16:9a:6e:e3:3b:79:88:55:81:
05:d2:f0:68:29:d4:24:40:a7:8f:9b:df:42:50:bf:35:03:95:
7b:b9:0b:22:54:44:d0:66:eb:70:0e:5f:96:c4:79:52:c5:f3:
c8:ee:e5:76:e1:7f:e1:84:06:5c:0e:a0:0d:95:0e:ce:52:c7:
ef:83:ae:00:1a:ba:3b:fc:9e:c1:0f:e0:3e:07:88:ca:6e:78:
18:87:d0:9e:7d:9d:33:ae:77:95:44:17:aa:b1:90:fa:09:8e:
37:4c:b5:78:d1:2e:2a:fd:f4:e3:b1:bc:94:6c:97:98:8a:9a:
51:3d:47:5d:ab:1b:99:c5:1c:bf:55:d1:0d:d8:af:07:d1:92:
af:96:f2:4e:9f:e8:d8:ec:0a:d1:51:c6:2d:0e:35:66:1e:86:
7a:db:9b:16:48:f8:79:eb:e5:d2:84:b5:19:5b:21:31:dc:05:
ca:6b:db:a9:35:5e:44:88:23:97:a1:8e:25:fc:44:f0:73:4b:
10:c9:db:c0:d4:94:53:85:56:b4:4f:e1:49:75:b9:d9:d7:d7:
aa:ea:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:19 2025 by rpki-client