Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74a9338-3a85-325b-b7bd-8c996e58d445.roa
File: a74a9338-3a85-325b-b7bd-8c996e58d445.roa (raw, json)
Hash identifier: 4OiPyWfQRs3R8/AhS+zS9AwcvKlveOpIwqD4bQmdyc0=
Subject key identifier: B5:32:1D:77:BA:05:6F:56:82:B7:DA:62:13:3D:7E:17:11:C6:9F:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CC1D5C21C2DCF0D63F32C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74a9338-3a85-325b-b7bd-8c996e58d445.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.54.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:c1:d5:c2:1c:2d:cf:0d:63:f3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=0bbb7458-50bf-4b7d-b211-725763c9003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:58:ed:a4:db:5f:1a:7b:6a:db:99:d4:12:
cd:47:92:de:a9:78:4b:76:31:24:b7:e0:22:ab:5e:
87:d1:f5:4c:35:99:fd:af:5c:33:2e:07:c0:b6:98:
60:e3:22:57:c5:a4:5c:e0:a3:7f:4c:ae:79:02:66:
0d:77:d5:47:d4:17:d3:cf:92:4f:50:ba:6f:80:48:
59:6a:56:52:c8:52:0b:7b:96:d3:5f:b9:64:ae:cc:
2d:f1:6a:b7:a0:43:7b:e2:17:9a:aa:02:1b:17:32:
28:e9:38:8e:20:fc:76:b3:19:ea:08:48:ee:17:d4:
c9:0b:cf:b2:b2:72:4f:10:e9:bf:5c:9d:75:5e:ee:
a0:ef:88:4f:11:bd:7b:88:54:d5:be:a8:ae:71:4e:
27:61:a1:41:c8:ce:e4:98:ca:84:72:f9:67:21:62:
a4:64:33:07:3e:2f:17:ec:7d:a0:4f:12:14:4c:41:
df:d0:e4:84:26:87:e8:24:fd:67:54:8a:5c:8f:d7:
4d:e0:2f:f3:c3:2a:e2:22:39:ec:c4:68:5e:6b:3b:
5b:b8:e2:96:0b:d7:0b:fe:9c:f4:2e:af:cc:cc:42:
e2:54:8b:f0:3f:6a:3e:e6:0b:aa:17:41:4e:db:27:
ad:db:23:3d:13:32:44:e6:70:9e:8f:5d:58:f0:08:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:1D:77:BA:05:6F:56:82:B7:DA:62:13:3D:7E:17:11:C6:9F:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74a9338-3a85-325b-b7bd-8c996e58d445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.54.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:38:9a:a3:e9:8d:04:c2:09:f2:57:24:1e:84:e5:2b:90:f2:
a3:f6:b8:7f:52:89:06:5b:8a:93:7a:97:af:8c:f4:73:d6:2b:
e2:88:4a:7e:cd:71:07:9c:75:76:dd:33:10:05:b0:c1:d7:6f:
31:e7:9a:ff:0c:51:7b:0b:e1:c6:3f:2f:0c:f8:62:13:c3:e8:
74:3c:9f:fd:2d:7c:ea:90:35:c5:2d:a8:cb:58:4e:76:00:60:
60:18:1f:27:85:2b:93:26:ee:de:74:67:09:e4:cb:69:4a:62:
de:36:6e:4a:f2:dc:dc:08:12:cc:a6:7b:fb:f2:5c:a5:35:8a:
50:37:40:33:1b:d0:a5:f9:9d:21:aa:3e:d7:a2:26:c5:98:7d:
b7:e2:6b:e7:5e:c0:24:2d:04:30:68:5e:72:c7:9a:ef:60:13:
af:a3:6b:76:1b:5e:0f:60:02:0d:c6:56:a3:d4:4b:9c:ab:bf:
b4:36:6a:90:06:8f:5b:24:ce:35:67:a1:ac:c8:7b:56:6e:10:
f9:c0:88:b2:81:65:df:ca:58:60:cb:da:4f:35:c5:b9:48:69:
01:16:ce:31:bf:78:d0:e4:20:d0:8a:50:e7:46:e5:b1:04:fc:
cf:a0:eb:0a:5f:9f:0c:75:6d:2b:8e:0d:e6:9b:16:19:6d:71:
90:07:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:42:45 2025 by rpki-client