Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950de287-404a-3094-98de-d9d9c1c221fe.roa
File: 950de287-404a-3094-98de-d9d9c1c221fe.roa (raw, json)
Hash identifier: Iv2reSZcdk8AP3nIB5Y5lDt/7rqLcyhxi1aIx6icI8o=
Subject key identifier: 85:E1:A2:92:8E:BB:17:08:68:C2:1C:B1:06:DD:93:C9:51:5C:EE:F8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858490CB1797CAF5CCF2E7C482280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950de287-404a-3094-98de-d9d9c1c221fe.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 22773
IP address blocks: 98.161.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:79:7c:af:5c:cf:2e:7c:48:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=430649af-4ee7-427e-9a03-bc3ba993e006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:8c:1c:a2:2b:d5:e4:8f:6c:77:23:d6:e8:
ab:c3:61:93:e0:38:5a:6f:41:e3:9e:20:7c:78:8d:
75:c5:1e:69:d6:bd:c3:6c:b9:9a:48:60:9a:6d:99:
10:38:94:62:b2:f5:30:89:43:57:cd:0d:75:68:7d:
33:9a:af:2e:57:98:f0:39:95:9e:ae:97:a2:db:e9:
33:8e:be:0e:18:61:59:10:5a:2d:80:dd:d8:30:1b:
90:f1:b1:43:0e:a5:c3:07:e1:b1:b4:5d:20:45:ab:
60:f5:80:84:1f:05:05:ec:af:f8:54:ee:a6:51:5d:
35:cd:bb:8f:01:44:3b:ac:94:66:e6:04:76:11:1b:
f8:10:f7:ad:75:3a:b1:f2:82:d5:da:c7:0b:58:27:
0d:4c:83:d2:72:64:b2:73:b6:19:33:d9:8f:96:86:
ad:53:c7:ed:c9:4f:0e:79:f8:b4:4c:c8:80:9c:a7:
61:0e:55:ef:56:bc:c8:04:d1:25:66:a1:27:01:df:
31:ac:3a:15:04:b3:58:e3:8e:6f:de:ca:e5:ca:65:
34:c0:95:0e:6b:d0:54:e7:83:b9:b4:29:c1:d4:4d:
37:e1:80:eb:ca:f2:9f:f0:3d:37:24:63:a5:fb:d8:
1a:44:57:95:f6:13:6c:54:06:8e:72:5a:28:61:19:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:A2:92:8E:BB:17:08:68:C2:1C:B1:06:DD:93:C9:51:5C:EE:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950de287-404a-3094-98de-d9d9c1c221fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ec:fd:37:7d:f6:5b:4c:4a:81:fd:82:e1:bf:3f:c8:d7:a0:
ab:84:2a:db:fa:a0:29:2d:43:e5:04:24:5c:1a:5d:c0:8d:f4:
2c:a4:4a:95:dc:8d:29:54:9e:b3:d7:7a:6c:69:81:11:ba:e5:
60:d2:a1:49:2f:9e:14:37:d7:fb:80:63:b9:0c:76:9e:99:fe:
f3:30:23:33:d1:6e:ab:e7:3b:32:b1:ec:45:fe:95:67:ad:c5:
e3:1c:ac:91:31:d5:2e:19:f1:87:c4:ee:8a:39:02:8b:be:27:
f5:e8:7e:19:4c:5e:7a:30:7d:c7:0d:38:e4:fe:5d:79:60:51:
6a:f5:5d:1c:7a:1f:13:f1:38:07:6b:f0:4c:e6:34:05:d2:0a:
d3:3d:06:ec:05:68:1d:86:3c:f3:50:fc:ea:b7:45:ce:e2:a2:
e0:76:35:f9:d5:69:74:59:50:10:f6:33:68:6e:c2:e5:af:dc:
8b:84:80:f4:8f:0f:52:32:89:32:1d:ae:7b:51:1e:a1:56:6a:
f5:d3:0f:84:ae:fa:05:05:ca:2c:15:25:2e:b1:58:1a:db:6b:
f0:3a:75:cd:bc:b2:fe:d9:35:3d:e3:0e:c0:b3:93:69:ee:58:
00:eb:67:2f:80:a0:06:ec:e3:4f:32:da:b8:95:c2:6c:2d:92:
7b:44:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:59:17 2025 by rpki-client