Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa
File: ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa (raw, json)
Hash identifier: ywVZorj8mHrm4PXdvTJRzpFH3uCZE4ueV5Fux+3vQw0=
Subject key identifier: 89:52:5E:62:AF:54:7F:33:FB:76:61:48:18:F5:E4:CD:81:71:6B:CF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848E210ADF2167CAE41AC5D1240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa
Signing time: Fri 14 Feb 2025 19:33:11 +0000
ROA not before: Fri 14 Feb 2025 19:33:11 +0000
ROA not after: Thu 15 May 2025 18:33:11 +0000
asID: 7029
IP address blocks: 98.23.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:10:ad:f2:16:7c:ae:41:ac:5d:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 14 19:33:11 2025 GMT
Not After : May 15 18:33:11 2025 GMT
Subject: CN=cb45c114-148a-4021-976b-858642725125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:cd:5b:d3:99:3d:3c:ab:23:df:16:fc:c2:
c2:3b:aa:67:b3:c8:5f:66:6e:b1:d7:a6:94:33:69:
70:31:12:a6:54:78:c6:ef:13:91:94:0b:c4:d9:fa:
22:26:cf:e5:89:23:37:23:f7:f9:5b:b7:39:4b:58:
97:a4:95:15:e3:25:a2:60:67:7b:08:1e:6a:69:cc:
b4:e3:e7:b6:ae:fc:e2:5f:50:0d:54:aa:6f:bb:fb:
21:82:cb:c8:81:6b:bc:1e:68:c5:e9:56:2e:26:8d:
34:6c:b9:ab:6f:91:e6:30:93:31:7d:19:62:cc:45:
14:0d:20:0f:70:dd:3e:4f:7e:1c:58:29:98:82:b0:
29:59:5f:06:bc:1c:56:7b:00:0e:38:32:5a:ab:95:
a9:6e:04:60:56:bb:b1:3a:1f:34:31:4e:27:8e:83:
92:e8:b3:c3:14:cc:a6:a6:5b:33:6d:cb:98:1a:5e:
3a:e7:e2:2c:48:a3:87:02:4b:79:6f:67:a0:8d:21:
68:0e:2b:45:6e:15:9e:3b:8a:7d:4c:09:ac:31:c5:
f7:c2:f9:9e:af:fc:12:14:67:53:e4:5d:df:98:58:
04:b9:73:f7:f9:bc:63:5c:19:75:03:5e:88:ec:6b:
4a:72:28:c6:90:95:49:a7:8c:8e:6a:03:cd:ed:86:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:5E:62:AF:54:7F:33:FB:76:61:48:18:F5:E4:CD:81:71:6B:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7d:99:a2:1d:09:8e:24:9f:4c:33:0e:21:e3:f5:ba:aa:29:
b8:57:c4:4e:0d:04:ec:0a:a5:24:c0:8e:c7:8d:f5:4a:e5:6e:
39:1a:f8:50:d2:7e:cc:1b:85:f6:c0:b2:c0:4f:af:a7:16:1d:
b5:d5:f4:19:d3:4d:0b:1e:c3:f7:60:6a:98:28:39:4e:77:67:
e6:00:82:12:b6:02:a2:83:6c:b2:0c:0b:f1:0f:dd:81:c5:2a:
e3:a0:92:e6:02:80:e0:1d:4c:99:0f:24:f3:d1:c3:65:68:b4:
72:d2:f6:8a:57:2b:88:c0:84:1d:8d:d4:b3:8f:d1:5c:73:05:
86:ea:32:4b:3f:11:01:ad:ae:43:f7:b6:bd:43:85:ae:c0:b7:
94:44:e2:15:de:47:f1:ef:2d:7f:36:71:0e:8c:00:7f:76:67:
94:6f:e2:47:95:f5:4d:11:52:b0:30:35:b3:4f:72:c5:e2:db:
14:4e:69:f1:02:17:12:9c:eb:0f:98:72:02:e1:ec:13:61:b7:
8c:ce:6d:79:26:0d:18:d9:ff:6e:f5:67:93:46:78:35:cb:8a:
69:c0:f0:41:08:f1:ec:63:80:73:e6:93:fc:86:7c:23:92:05:
2b:88:f2:51:a7:fc:bd:8e:b1:a5:0c:36:ee:88:2e:9a:09:03:
07:d2:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:32:09 2025 by rpki-client