Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa
File: 9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa (raw, json)
Hash identifier: 2FTeQ3+pOWOnhg3rTeGUG0x6alPcZLcFCsTwQ1w+n/g=
Subject key identifier: F5:EA:65:29:64:47:1F:AE:0B:1C:9A:C4:C1:C0:69:2C:BB:74:03:BB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB046A8B60EF07EDB289700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 98.202.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:46:a8:b6:0e:f0:7e:db:28:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e94dced8-a5b9-4ce1-a794-a68023fd63e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:22:54:12:79:1b:b0:c6:ac:54:3a:45:09:
03:93:fa:ba:5c:4d:1c:45:3d:f5:4b:11:8b:7c:c8:
82:a8:23:27:23:52:3f:47:5f:2d:fc:14:99:c2:eb:
cb:a2:7b:f8:36:93:cd:22:be:7c:db:b4:b0:89:f5:
99:83:05:90:d8:cb:82:29:b8:79:6b:c0:92:5c:8e:
26:00:d0:5a:79:de:42:54:41:e1:fe:1f:e9:49:8b:
39:a8:f4:a2:d1:8d:9e:45:38:8a:7c:32:43:13:76:
03:83:d0:04:f8:cf:54:3c:e3:f4:95:9b:10:ff:49:
f2:0c:28:ee:02:7f:a5:94:50:f2:dd:6e:1b:0c:2d:
58:72:eb:77:3f:c2:0c:1b:82:ec:07:b6:38:af:fd:
25:07:3c:29:6e:9d:2d:00:3b:75:e6:76:fd:f8:af:
1a:4a:65:c3:b6:50:ed:af:59:4c:31:b0:b5:e1:08:
5f:66:08:0e:02:43:0e:2b:3a:9d:f2:ee:99:53:76:
ce:d9:a6:d1:cb:4e:e3:d3:f7:6c:68:f6:65:13:ca:
27:19:2a:b8:c1:f3:09:4a:32:e3:62:a2:f1:3f:2e:
57:ad:fc:e8:01:10:0d:34:b2:80:4c:c0:ff:36:9f:
de:d6:ad:a1:0a:9d:4d:30:3b:df:39:4d:7e:36:23:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:65:29:64:47:1F:AE:0B:1C:9A:C4:C1:C0:69:2C:BB:74:03:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.202.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:8d:30:91:0a:72:26:34:af:7b:cd:69:eb:f5:bf:73:91:b5:
77:a0:34:4d:ae:8c:70:c2:d5:90:f3:5f:b7:f8:74:c6:12:bf:
05:b0:3a:d6:16:3c:3b:c6:73:03:88:54:37:02:b9:d8:7a:c6:
c2:de:45:83:9e:4f:79:77:5e:a0:86:97:0d:7f:8b:87:56:29:
6c:7b:c3:c9:a1:48:d2:a6:90:96:e0:80:0b:a7:ac:e7:76:d4:
c9:43:8f:5f:48:c2:9f:cd:25:45:a8:ad:bd:3c:4b:b6:a2:23:
cc:2e:e1:aa:80:d1:29:05:fb:1f:ba:bf:9f:d7:1d:a2:c4:07:
09:7d:f0:9c:11:18:4f:ad:d7:a8:39:82:62:2f:c6:d6:fd:42:
9d:ca:cd:b4:41:36:02:54:2f:99:86:e2:d9:dd:7b:ef:32:4e:
7a:7e:47:26:4d:df:d4:44:d3:86:6c:0c:f5:c5:5c:93:11:a4:
60:33:b1:75:25:5e:f6:bf:81:45:91:c3:50:dc:53:c2:fd:ad:
23:68:2c:cc:e9:09:26:f3:bc:ef:a5:ad:a6:11:f1:7b:2e:3d:
a4:34:67:d0:3f:b6:1d:4b:37:70:85:c7:f2:d2:92:19:40:b9:
7c:9a:67:a6:45:97:e9:c5:00:c7:74:b4:f2:50:54:ee:38:9c:
03:1c:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:18 2025 by rpki-client