Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c85ccf93-accf-31de-82e3-0886e7cc04c9.roa
File: c85ccf93-accf-31de-82e3-0886e7cc04c9.roa (raw, json)
Hash identifier: +wIcrGBL/aO+aCZOd1FSQAn5/0hQQa+xLbovEiWplGQ=
Subject key identifier: 04:32:CA:91:E7:98:90:58:AB:14:34:E1:CF:BE:01:32:6F:5A:D7:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C65FCB0091043EABE2100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c85ccf93-accf-31de-82e3-0886e7cc04c9.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.251.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:65:fc:b0:09:10:43:ea:be:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=b5d0de1b-91b6-429a-a027-e174dda2f2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:25:e4:a8:a5:90:75:4c:92:71:95:e8:ca:
30:06:2d:52:7b:53:55:16:9f:17:18:c2:6c:e6:2d:
5e:a9:fe:eb:ea:18:be:0e:aa:67:7a:0f:45:4a:23:
7f:02:25:56:0c:80:02:6f:54:9a:82:5d:79:a1:21:
a1:9a:7b:ba:b4:1b:52:82:83:25:c8:f3:e6:00:b1:
44:42:03:b3:21:32:74:bd:74:e9:67:e8:6c:c5:2e:
20:96:b2:9c:33:12:04:7d:4c:9a:08:78:ed:6f:46:
53:df:e0:aa:67:b7:fc:05:87:0f:ec:8d:c3:15:2a:
54:45:14:95:65:f7:bd:87:2f:2f:31:18:e6:bd:1b:
0b:f0:14:53:98:8c:6e:07:3d:6c:eb:9e:73:70:08:
7b:69:5b:5c:0d:3b:b8:1f:6d:d9:dc:d6:8c:21:a5:
c9:ef:de:c1:48:c1:c2:9d:ce:54:a4:22:86:0b:1e:
07:65:30:ce:b4:eb:d8:53:76:ec:6c:c4:7e:f8:2c:
68:0e:d3:de:69:e5:ff:bf:52:1c:89:a4:04:62:6c:
b7:4c:36:96:26:92:98:fd:57:23:09:0a:1a:4e:05:
65:ae:57:f5:a8:21:b7:e8:bb:14:2c:14:9c:21:38:
2b:5f:14:de:42:f5:a0:07:16:e1:4e:c1:6b:5e:b6:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:32:CA:91:E7:98:90:58:AB:14:34:E1:CF:BE:01:32:6F:5A:D7:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c85ccf93-accf-31de-82e3-0886e7cc04c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.251.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f3:ca:c3:e0:4f:86:8b:46:fd:3a:6f:dd:b8:17:35:8c:e8:
7f:9a:3f:bf:05:91:96:e6:ee:24:6e:10:ee:8c:15:3a:78:5a:
e6:1f:56:69:44:1e:9e:eb:02:57:4f:90:f8:bd:0d:36:75:09:
0d:24:8b:dd:65:1e:0f:39:94:e0:2e:64:7a:92:a7:8f:c5:96:
c4:f3:c9:b3:83:d5:3a:09:ac:f1:8e:f1:01:27:29:85:4a:08:
3b:5b:9f:9b:57:cc:4c:ad:54:1e:14:ad:0e:3a:ad:e5:e6:d3:
1d:1f:c3:99:c2:93:b3:58:29:ca:66:ce:7a:66:63:3e:e5:84:
30:93:d8:1e:50:bb:94:11:45:87:73:34:45:20:37:43:f8:29:
89:1e:df:11:f3:9f:d3:49:2a:fc:94:fc:63:b9:77:ee:d0:e4:
42:57:11:b6:47:bf:a9:4a:16:43:3d:de:e7:b1:71:6f:c8:fa:
17:20:d8:88:24:6f:9e:e1:82:8f:bf:39:b4:50:f4:7c:83:28:
f1:d9:77:88:8d:b7:d3:94:46:3d:14:d0:b7:25:39:9b:ee:14:
f0:c0:74:6c:30:6d:12:38:ff:2c:9d:58:54:a6:4f:e7:32:aa:
5e:24:62:1a:12:3e:f0:ed:ed:0f:9a:3c:fa:37:55:b7:fc:e0:
5f:82:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:20 2025 by rpki-client