Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7ac81b4-c4dd-3533-830d-4af35be3e617.roa
File: e7ac81b4-c4dd-3533-830d-4af35be3e617.roa (raw, json)
Hash identifier: ba+Md/gvOL/N507K9wLIZkEfZg9UeruT5ErB4X7rQds=
Subject key identifier: B1:FB:C9:E5:B8:D8:B5:9B:D7:AD:8F:FE:45:44:FD:05:5D:34:A8:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFCD961019492E40C0E740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7ac81b4-c4dd-3533-830d-4af35be3e617.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.228.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:cd:96:10:19:49:2e:40:c0:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=dff0c4a4-c02e-423f-8410-bd47fc128963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:af:8b:66:50:6a:51:ff:c1:67:5c:58:46:
f0:0e:9d:89:48:96:77:71:d7:28:bc:06:12:69:50:
d4:87:6f:1e:4b:f6:b3:fc:97:70:4a:c6:ae:c8:e5:
a6:b2:e2:68:50:55:5a:1b:8b:32:f7:d0:3f:ab:7a:
09:bf:c2:f7:89:6b:be:32:55:6a:ad:de:91:79:0a:
62:e1:41:d4:cf:1a:59:4b:f5:c9:27:b1:fc:a5:fa:
00:31:c1:44:d1:9c:ce:a3:08:8b:23:7d:7a:7d:1a:
0a:9a:74:58:35:71:98:c3:04:0b:c9:e4:9b:0e:ae:
e6:89:ec:8d:91:7a:44:37:81:65:29:f4:e9:af:ef:
71:ab:fa:f3:07:c2:c7:12:2a:f5:e3:97:36:de:0c:
08:1a:a1:bf:d1:50:d0:ee:53:97:53:9b:93:ff:37:
49:5c:b1:44:45:4f:82:07:8f:03:72:f0:22:ab:51:
b2:8c:88:0b:4c:bc:af:58:2d:c8:49:de:1a:61:6e:
e4:80:f5:aa:3d:11:06:12:14:00:c2:f0:ee:76:37:
50:2e:ac:58:1a:83:c8:9a:7a:cd:90:ba:d7:3a:eb:
6c:c8:f6:db:da:8c:ac:2b:3f:e5:78:67:48:83:77:
8d:65:58:44:24:8e:a1:c5:70:22:cf:f5:bb:32:76:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:C9:E5:B8:D8:B5:9B:D7:AD:8F:FE:45:44:FD:05:5D:34:A8:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7ac81b4-c4dd-3533-830d-4af35be3e617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.228.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:43:67:2a:54:d6:d6:1c:1e:22:d4:6d:3b:a7:b4:87:67:bc:
13:e2:c4:94:38:09:a5:70:bf:76:2a:9c:19:d0:72:3c:4a:79:
e2:a0:1c:df:d7:b0:7d:38:f0:2b:21:ce:59:8d:bd:0d:63:b3:
d3:8e:c4:74:d5:05:c6:5c:bd:41:eb:67:1a:88:d4:92:83:28:
b1:ba:46:d9:42:62:08:c0:23:70:70:90:19:8e:15:11:ed:ce:
5a:a0:48:bb:f0:9d:a0:44:03:8c:bd:2a:ad:e9:63:7c:22:75:
34:5f:6d:f3:c1:08:af:a6:42:e8:31:81:99:fb:12:b5:28:cd:
b4:5e:44:b4:02:91:d9:02:a1:32:c1:57:11:58:2d:4e:22:66:
99:78:e5:53:21:4e:84:a4:6d:86:67:74:62:66:82:ec:95:ab:
0d:22:3b:d7:10:16:e2:46:63:c5:a1:ce:04:c0:5b:83:62:c5:
03:75:f4:0e:2b:86:a5:e2:54:eb:a8:a0:11:19:c4:45:a5:cf:
2d:4a:0e:03:8d:44:2e:df:02:81:a0:06:34:cb:65:b2:4e:11:
4a:75:29:48:53:37:49:66:d5:78:da:f3:7c:9b:78:0f:0c:e3:
75:93:9d:7f:50:fe:50:85:e5:8f:bf:88:69:0e:03:77:ea:99:
a9:36:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:44 2025 by rpki-client