Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa
File: f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa (raw, json)
Hash identifier: nVUlLTnBQBIwAJQfrqEtkrzuEp1WFm/alN+88lu7AIg=
Subject key identifier: BB:06:A9:71:71:6F:63:24:96:33:60:97:30:5A:D1:53:E3:B0:8E:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B2655CAC1371609BD8A5F780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa
Signing time: Tue 28 Jan 2025 17:45:00 +0000
ROA not before: Tue 28 Jan 2025 17:45:00 +0000
ROA not after: Mon 28 Apr 2025 16:45:00 +0000
asID: 33491
IP address blocks: 98.222.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:65:5c:ac:13:71:60:9b:d8:a5:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:45:00 2025 GMT
Not After : Apr 28 16:45:00 2025 GMT
Subject: CN=f81b2f7a-ed8e-4ab6-83c1-c35db94c79fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:0e:dd:82:69:e0:53:29:81:bd:f4:d3:e9:
49:d9:ed:c9:a4:4e:23:90:9c:8a:56:ed:a9:d0:65:
33:e8:d4:f3:d7:a7:98:1f:14:7e:97:98:ef:a8:50:
90:4d:8f:21:84:cf:7b:d6:ec:ca:52:20:75:9f:d7:
38:b4:fb:00:0c:00:7b:02:17:07:2e:ad:82:fc:01:
71:cc:14:a8:28:2e:72:db:64:22:14:b1:30:f2:a5:
83:70:3e:78:1f:ec:23:a4:9b:13:93:6a:1f:2e:fe:
22:39:1d:9e:7a:a2:9d:76:2f:56:9d:d4:1e:5d:3e:
b1:4a:c7:39:f2:8e:7b:9b:71:04:29:7b:88:61:7d:
c2:da:e1:32:36:9c:d8:9a:f9:ba:42:00:9b:ff:93:
74:5f:46:ca:67:0f:77:48:36:8b:cb:91:83:2c:30:
1d:29:9d:2e:47:a9:5a:1e:e7:34:cc:ae:d2:3a:18:
46:88:2b:49:ad:62:1d:00:2e:c6:83:64:4d:b1:21:
82:ff:92:8d:f6:64:81:a7:69:63:ae:2e:48:5d:3e:
80:93:8b:2c:c8:f4:c8:fd:e9:05:6a:f6:f3:07:05:
7d:45:99:3c:5b:45:16:55:4a:36:d2:d1:b9:6f:2c:
f1:a9:19:c9:35:e3:c8:a0:a1:81:42:2a:b0:eb:70:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:06:A9:71:71:6F:63:24:96:33:60:97:30:5A:D1:53:E3:B0:8E:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:df:19:95:7d:2b:78:e8:d3:b7:ef:10:14:b7:72:b6:6d:8c:
b2:85:f5:c3:d8:69:80:a8:fa:2b:ed:fc:d0:e0:b3:b3:bc:36:
bf:56:98:af:70:83:76:a0:33:22:84:6b:2c:30:b1:20:f1:b8:
4b:d0:81:79:41:1d:0f:03:ee:35:c5:1c:b3:e1:c2:3d:91:8e:
15:2e:e7:90:9d:56:04:cd:8b:44:4b:30:1c:fa:33:81:c9:01:
18:85:82:b2:71:af:c5:b6:21:2d:58:c2:e4:3b:b5:9b:ad:85:
1c:2d:6e:63:fe:06:80:06:c4:66:83:e2:c2:2c:00:cb:4f:50:
4a:e1:1f:9e:af:b9:85:24:54:6f:b0:fa:79:92:09:2a:1b:95:
77:ae:cd:b1:11:fc:f6:96:a7:b1:88:7a:3c:06:6a:78:05:23:
22:c1:02:00:30:11:93:1b:b4:d2:06:4d:ec:e1:e3:06:50:68:
85:93:04:83:43:80:ea:49:c1:41:a7:29:3f:ab:80:b8:29:d0:
30:36:c0:40:a6:b6:1b:36:f6:57:40:6f:b0:e5:da:4b:f2:cc:
f6:f0:9f:88:d6:36:7e:57:e5:94:01:d4:5f:f0:c4:c6:cd:eb:
8b:4a:44:15:c6:42:98:c3:03:b5:ca:1d:b2:13:5f:7a:72:90:
c5:4b:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:22:11 2025 by rpki-client on console.sobornost.net