Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9681bdcf-757f-3f03-9792-76eaa7b84efa.roa
File: 9681bdcf-757f-3f03-9792-76eaa7b84efa.roa (raw, json)
Hash identifier: xOU4eTr8zxjbNGIGQVPCAg9I492yGiR9TcNIw2vYV94=
Subject key identifier: 87:40:60:AA:D5:60:AA:BB:0C:5F:74:BA:E0:72:02:14:29:48:D5:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFD379A44CC0DC8D1326C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9681bdcf-757f-3f03-9792-76eaa7b84efa.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.52.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:d3:79:a4:4c:c0:dc:8d:13:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=11113645-8b0b-4756-8e0c-461df111ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:0d:78:88:53:15:a8:89:a5:7e:8d:be:a8:
de:7c:72:4b:e0:2e:98:58:be:42:1c:6e:e9:df:14:
c9:7b:7a:a8:65:2a:75:a3:72:e7:26:96:2a:a7:7e:
5a:20:4f:d7:6d:24:37:be:ac:6c:68:07:74:b9:f4:
ac:73:c9:38:74:0a:68:0d:d1:28:d9:e9:02:8a:cb:
40:38:62:c3:ae:6e:1a:0d:da:c4:48:ae:74:22:d6:
e5:9a:ad:37:d3:54:c0:61:3c:ae:b7:6a:5a:e7:19:
3a:34:7e:d9:25:17:2b:35:10:75:a5:79:e8:ec:36:
93:94:4c:3d:f2:c6:e4:e9:5f:26:23:82:7a:46:80:
de:b0:70:9f:b4:0e:fb:f9:16:e2:24:c8:21:25:14:
cf:ca:82:c1:ef:7a:64:23:34:a8:7e:5c:58:af:d1:
84:31:b6:c0:ce:53:05:0b:d1:34:b8:61:24:58:32:
91:7b:f6:75:b9:60:c8:4b:ee:65:4b:cf:ff:1b:e7:
3a:fe:02:25:46:dc:14:2d:63:cf:cc:03:7b:96:9f:
28:e7:6a:5d:14:b1:e8:06:0b:6f:aa:98:f3:fd:3d:
c0:ff:84:e6:7e:91:f8:7b:53:7b:5c:06:61:81:ff:
c6:38:81:76:b5:78:67:cc:eb:cf:50:9a:38:43:f3:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:60:AA:D5:60:AA:BB:0C:5F:74:BA:E0:72:02:14:29:48:D5:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9681bdcf-757f-3f03-9792-76eaa7b84efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.52.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:36:ad:4a:45:4b:65:c1:bb:51:fd:85:ac:6e:2a:7f:39:bc:
ed:1b:86:e2:76:0d:40:39:35:aa:d6:eb:d9:50:78:1e:c0:33:
5f:0f:84:05:54:af:4a:7d:b3:8a:15:5e:26:88:b0:e7:24:c5:
3f:12:9e:84:bc:5c:be:01:31:6e:9c:e5:7c:5c:9b:ac:20:30:
b6:66:eb:85:0b:29:15:55:44:d7:b5:59:7f:0c:4a:e3:a0:5b:
a4:27:4b:87:96:19:ed:e4:ec:7b:a0:7d:f8:23:96:c5:05:c7:
ac:24:9e:ad:c9:b9:d4:f9:2c:dd:3b:48:94:f9:40:df:e2:b0:
0f:be:0a:18:0a:ac:c2:00:3b:fd:e9:99:83:4e:72:b0:66:e1:
46:ba:9a:44:d5:67:d6:13:ec:fc:ee:f8:a5:97:2a:c2:4d:a6:
95:61:46:68:39:b8:ef:ed:b7:e5:3f:c4:79:66:68:bf:30:28:
cf:2a:78:19:a3:77:a7:07:b9:ec:26:ff:d1:8e:22:5d:48:73:
bb:53:49:49:ae:e1:63:9c:df:74:c7:d8:ea:a3:49:01:50:c4:
1f:d6:46:c3:6d:13:fb:f9:fa:09:ff:12:fa:11:12:52:3a:80:
4b:af:a8:1b:48:25:20:37:17:bf:e2:76:fd:cf:cd:a1:a7:9c:
32:21:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:55 2025 by rpki-client