Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9bd72ad-2a35-3f91-9224-540cb46ef91e.roa
File: d9bd72ad-2a35-3f91-9224-540cb46ef91e.roa (raw, json)
Hash identifier: fRfElikEAcPkUhnLD/0QN4ghVxCN/hvNM2vpcRDzbik=
Subject key identifier: B1:B7:FA:5A:F6:6F:CA:EA:F0:4A:EB:AF:36:A8:40:E6:0B:7E:79:D3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6673688A9BBDEBC34480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9bd72ad-2a35-3f91-9224-540cb46ef91e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.251.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:66:73:68:8a:9b:bd:eb:c3:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=88351e74-686a-452a-b405-a4185c5e716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:ee:e4:66:3f:32:a1:8f:ab:04:a4:79:dd:
be:6c:a9:b9:30:6a:6d:c8:9c:4a:84:2d:20:ba:d3:
fc:69:cf:ce:94:c5:38:d0:f8:10:6c:6a:5a:9d:99:
7e:c6:54:6e:df:95:cd:74:10:27:dc:0b:7f:93:60:
35:b6:df:72:de:11:e4:88:b5:71:d2:56:01:13:ca:
65:65:58:7e:88:08:34:ac:3c:b6:64:9f:5d:e4:f9:
aa:80:98:2a:08:f4:cd:bd:14:ec:30:56:f7:4c:e6:
d8:4c:e6:85:b2:2f:24:a2:6c:4c:d8:59:87:ef:58:
07:b2:8b:79:c0:bd:4b:7c:9a:b1:a7:e3:e5:fa:32:
26:e6:2e:eb:b1:ea:da:08:b4:90:3d:e1:f1:98:2c:
64:43:0a:35:97:8a:16:55:e8:b0:0b:f9:b2:dd:1c:
e2:de:75:dc:28:13:53:a6:3c:23:54:ce:65:3d:72:
bd:97:7e:e5:ad:50:5e:9a:c1:bc:5d:a4:7a:db:ff:
c6:20:90:35:0e:58:17:b3:e8:7d:b4:45:77:6d:86:
23:34:4d:02:f8:9c:f3:cd:44:d2:a5:d5:ca:40:5d:
6d:bb:7f:88:df:f9:26:52:55:fd:17:03:a7:17:f3:
c1:58:cb:bc:86:8d:06:5e:73:85:61:1b:62:16:9d:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B7:FA:5A:F6:6F:CA:EA:F0:4A:EB:AF:36:A8:40:E6:0B:7E:79:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9bd72ad-2a35-3f91-9224-540cb46ef91e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.251.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:4b:6a:92:48:6a:52:bb:1b:47:67:93:5a:e3:88:a7:a2:ba:
88:5b:4e:0a:38:7e:fc:38:09:42:77:5e:37:ac:8f:c8:55:f4:
35:99:19:28:cf:aa:2d:79:fb:68:f4:56:9f:a8:19:42:02:ca:
04:a0:23:a7:77:73:e5:3a:f9:60:e6:e1:94:25:ee:db:31:6c:
ea:f0:9c:d6:19:8b:1e:4f:fe:ad:ea:0f:c9:48:f9:36:8a:d6:
bb:83:f5:be:6a:b7:41:f4:de:ac:ae:3f:ca:a3:d5:a5:c0:14:
55:0f:d0:aa:98:3b:ad:b3:1d:fe:a0:59:9e:8b:47:4f:00:4b:
df:c0:27:55:a0:d8:81:df:a7:fa:12:d0:fc:02:e2:eb:0d:b1:
eb:f5:af:0c:b7:eb:e7:71:3d:e6:d2:38:58:ea:cb:1e:61:ba:
f0:0f:e7:6e:52:c6:66:64:05:3a:5e:86:4b:16:4e:eb:38:c8:
ee:d7:6e:e6:a1:a6:a0:71:6b:1c:2f:31:d4:11:96:34:df:f8:
66:56:d6:f1:1e:be:29:75:5b:8b:1a:d8:ec:33:a1:39:cd:5c:
fd:7a:92:11:e6:4c:62:ff:66:a4:9d:62:04:92:4a:74:7d:c3:
b9:de:c4:fc:97:f9:ac:a6:33:e3:62:ad:b5:75:5f:47:ea:e7:
76:11:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:22 2025 by rpki-client