Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc5cac2b-7491-3b66-b270-9b821c7e390a.roa
File: cc5cac2b-7491-3b66-b270-9b821c7e390a.roa (raw, json)
Hash identifier: NpHiVpmqKFTXiqpgwiXcxijFMM9jBw1YVFXej/tUpSc=
Subject key identifier: 66:76:52:ED:F4:BD:41:FC:BF:4C:1D:7B:D1:11:B7:DA:C7:F2:43:4D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7D24AAAB99E509DC57E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc5cac2b-7491-3b66-b270-9b821c7e390a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 98.250.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:d2:4a:aa:b9:9e:50:9d:c5:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=f991fc1d-0828-4275-913d-d330e214a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:97:56:18:a2:c3:54:54:7e:42:5f:20:1d:
65:a1:ec:63:e9:ab:98:6b:de:14:c5:58:4c:50:65:
94:ff:a1:7b:6f:82:2d:2e:d6:f6:65:77:f0:8a:1a:
17:f9:89:09:5c:89:e6:51:94:85:92:1c:d1:31:03:
3b:ea:76:01:3b:9b:3e:21:1a:65:66:c6:42:cf:a9:
d1:71:68:a2:c1:de:96:d7:e8:02:c0:76:8d:2a:ea:
a5:20:91:d6:21:a7:71:f3:1d:62:11:d3:b8:67:99:
42:18:9f:72:5f:5e:4a:68:7d:f8:da:fd:5e:94:78:
ef:7c:95:fd:54:a5:74:c5:71:72:ad:8d:2f:e1:b2:
db:03:a7:54:1f:7f:c0:4a:f3:df:2d:03:1d:ba:ba:
ab:8d:f7:c8:d1:4c:90:f4:18:01:78:3f:97:6c:c0:
c1:39:45:39:32:87:17:e7:0b:90:a1:99:0a:f4:84:
be:b6:82:c0:f2:88:f0:3b:95:2c:4f:76:d8:16:cc:
ad:22:71:7f:dc:b4:09:b1:72:8a:5e:19:82:d5:b7:
b6:4c:0e:4c:58:19:b1:c8:4f:30:31:9c:45:27:43:
a2:70:e0:7e:00:0c:41:03:94:bb:8c:7a:16:d6:cb:
f9:6a:ea:47:ae:ce:84:a8:86:a8:32:46:7d:c9:09:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:52:ED:F4:BD:41:FC:BF:4C:1D:7B:D1:11:B7:DA:C7:F2:43:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc5cac2b-7491-3b66-b270-9b821c7e390a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:42:d3:2f:fa:81:53:f0:b6:ed:83:92:e3:d8:1f:6f:1e:b0:
04:2f:90:a0:b0:ef:34:46:11:9b:11:a8:b9:22:d6:04:72:69:
e4:5c:c3:b8:28:5d:74:58:2f:24:33:66:39:c6:f3:35:75:75:
3f:69:f6:7c:af:91:35:cf:93:4d:e2:7d:38:e9:29:32:cf:4d:
2e:4f:f9:6a:5d:0b:27:15:e4:8f:b4:7e:0f:75:cd:b3:71:d0:
5f:fd:49:3e:7b:0b:7f:e0:1d:da:92:3d:37:67:a5:c4:66:95:
3a:99:b8:23:19:d3:6b:f5:f5:c8:d8:17:6d:9f:64:7b:26:b8:
7f:be:7d:b7:42:28:14:4c:df:49:bf:b2:a2:3b:4e:fe:04:1a:
f5:ae:4e:95:e7:17:ae:4b:b1:8f:47:96:8f:e3:de:4f:e3:10:
54:3c:f0:20:81:3a:ad:10:17:c2:34:ea:64:fb:b5:15:b4:15:
e4:c5:fe:49:7a:bf:b5:96:71:0a:9d:a7:f8:c8:ea:36:33:eb:
aa:d5:d7:a7:3c:c9:39:6f:f6:55:40:e0:c7:a1:77:cc:db:4e:
8f:ae:b2:e7:87:84:a0:a0:8d:88:47:24:b2:76:8a:b0:5c:5a:
36:75:57:4a:b8:ea:95:3b:76:82:e9:2c:ee:64:1e:12:15:71:
7c:d8:33:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:34 2025 by rpki-client