Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df009bc0-0399-3fcb-b8d6-7239a5052aec.roa
File: df009bc0-0399-3fcb-b8d6-7239a5052aec.roa (raw, json)
Hash identifier: pAoLoKz19OUgkViJzyCX0QF8pJfQs/W04nrPb6RNJPU=
Subject key identifier: 1D:3F:E2:09:78:51:AE:CF:EA:F9:7A:6E:C2:9E:C5:4D:D7:66:F4:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DD179D445FB7DB149A7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df009bc0-0399-3fcb-b8d6-7239a5052aec.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 98.59.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:d1:79:d4:45:fb:7d:b1:49:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2abab55e-6270-4f5d-bf45-14d4a66ea219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:3a:12:d7:2f:eb:f0:c6:bd:30:4a:4a:fb:
d3:bb:6a:e4:44:fe:9f:88:99:e8:41:a9:36:66:59:
de:94:84:03:47:df:79:e1:d4:43:46:07:4d:c4:b3:
9f:04:13:de:2b:b5:d5:89:16:12:81:ad:bf:ab:d1:
39:fe:16:45:db:24:f4:87:a9:8a:87:e6:e6:e9:d5:
2b:13:5c:35:32:b8:79:4b:ed:2f:13:09:fe:96:48:
99:64:0c:f8:83:00:c4:0c:64:3d:fb:13:17:a4:a6:
a0:a4:fa:af:72:03:87:d8:f4:4f:2d:ee:b2:e4:e5:
bb:13:c4:45:00:f8:ba:1c:a5:3e:ed:5f:01:17:16:
93:ef:52:8f:a0:87:86:10:3c:73:da:27:61:93:cb:
f4:82:38:f6:25:45:75:40:9c:99:71:77:af:fc:01:
14:4b:58:b1:d3:31:4e:3f:a4:ed:81:ae:45:d8:1d:
f1:8d:ee:a8:db:0f:c9:74:b7:b4:7f:95:a4:61:c9:
2a:3c:73:92:22:4a:80:7e:66:53:42:ff:99:09:27:
4c:1e:0c:3a:34:55:68:6e:1a:09:2f:7e:09:c8:58:
d6:30:c7:03:a3:52:25:12:8c:b8:06:be:36:0d:97:
97:fa:2d:2f:68:a9:99:41:4d:6d:0b:62:64:50:79:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:E2:09:78:51:AE:CF:EA:F9:7A:6E:C2:9E:C5:4D:D7:66:F4:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df009bc0-0399-3fcb-b8d6-7239a5052aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.59.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e6:1f:15:9f:b3:07:23:5e:75:6b:51:ad:ba:55:ba:1f:75:
63:cc:f6:e5:66:bf:6e:91:16:98:a2:13:04:47:cb:ab:fe:be:
1b:76:6b:be:82:45:d8:fa:aa:af:fe:53:72:65:9a:90:33:6b:
49:92:e2:14:00:8c:ea:a1:a1:7a:54:4c:f4:c2:77:bc:3d:16:
68:3e:ea:23:2f:59:cc:7a:f9:29:14:93:d6:de:92:ff:10:c1:
c6:c6:9a:a6:7b:73:f1:6c:c2:90:96:e2:5f:78:77:95:ed:89:
03:24:4e:82:82:19:11:14:4f:8a:bd:1c:c4:0b:e7:b3:b8:59:
0e:a0:d5:b8:a1:a1:d3:ef:12:ba:da:ec:a8:45:aa:32:5e:48:
23:1a:78:77:a0:91:b6:43:34:bd:a2:57:44:b9:12:cc:a8:a6:
f7:67:51:a0:c6:62:1a:14:eb:d8:7a:d3:6c:8b:bb:2a:d7:f3:
2c:c6:9e:4f:7e:e2:23:a2:b4:46:a4:f8:9a:fa:f8:ed:e9:a6:
ff:b1:7b:49:fc:4e:02:78:d5:6e:a7:de:40:32:84:b8:b3:08:
b1:c0:11:ce:0a:84:de:37:8d:9b:0c:0f:bd:59:f7:26:53:6e:
f1:e8:b9:22:eb:7f:ee:6f:c0:cb:a0:37:a0:c1:35:11:a8:dd:
41:da:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:07 2025 by rpki-client