Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0b492138-3624-3ab5-9fbf-27ccc1ad3e22.roa
File: 0b492138-3624-3ab5-9fbf-27ccc1ad3e22.roa (raw, json)
Hash identifier: LL34iiNMSvUfKnf4DuBnDYmKANW+y1IKhPpjSskS2cU=
Subject key identifier: F4:7C:3F:5A:47:21:81:0C:9D:AD:3E:2A:D8:10:A5:6D:99:A0:45:0E
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584898D5FAA9EB04410BEF2CC700
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0b492138-3624-3ab5-9fbf-27ccc1ad3e22.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 62240
IP address blocks: 98.159.37.0/24 maxlen: 24
173.239.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d5:fa:a9:eb:04:41:0b:ef:2c:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d01cc31b-7e53-4d65-9aad-39398e1e69b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:ac:e9:4c:a8:9f:dc:1a:cc:16:cc:a4:b0:
d9:48:17:4c:15:bc:4d:39:8b:45:01:dc:df:94:f8:
82:94:f9:90:21:74:b5:61:6f:70:c2:88:60:fd:df:
58:aa:6c:0b:15:65:cc:87:8e:15:92:3a:e0:77:91:
be:a6:b1:75:ee:89:17:3a:00:e7:f6:9d:29:c1:49:
26:a2:5f:96:e0:5f:68:74:a0:71:64:b3:76:df:48:
ad:66:5b:e0:58:5c:80:55:47:09:9c:5a:f1:e5:83:
dc:ed:0c:09:70:e5:75:fc:14:96:b0:11:e6:28:98:
3b:df:92:84:13:b8:1d:b3:9c:40:fa:23:c7:36:07:
b0:56:5f:23:11:bb:c7:47:97:95:db:09:13:48:54:
fc:5b:27:7b:71:0f:60:f6:94:1e:50:77:20:7a:83:
b2:30:2a:db:b1:1b:2c:c5:37:89:80:ae:af:50:43:
e3:fd:12:ff:5f:b9:36:72:d8:cb:d5:6c:66:1b:b1:
92:4e:66:c0:15:99:fd:50:81:3c:47:d0:6c:21:a1:
30:1e:84:7d:f1:2c:a0:78:a3:03:93:e2:41:78:a2:
59:34:04:b5:8d:49:80:c5:dc:53:f8:e4:ae:1a:17:
52:69:b8:2d:02:00:51:71:64:be:a1:3d:75:9f:89:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:3F:5A:47:21:81:0C:9D:AD:3E:2A:D8:10:A5:6D:99:A0:45:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0b492138-3624-3ab5-9fbf-27ccc1ad3e22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.37.0/24
173.239.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:bf:a9:54:20:fe:8d:7e:b6:ce:b3:86:0c:25:7a:94:26:2e:
bd:4f:77:7c:f7:bf:4f:2d:05:c7:d4:4a:24:3c:b1:88:f8:93:
e4:8c:69:1d:14:02:37:dc:48:e4:b3:e1:29:4f:0f:86:17:7a:
52:57:fc:ed:76:bd:d5:c2:77:b5:bb:32:e7:c1:eb:f7:7b:3e:
24:c9:67:9d:e4:d1:5b:12:81:99:d5:c2:a3:4d:36:4d:83:c2:
52:71:37:b7:b6:01:b1:60:da:48:28:45:bc:01:48:3a:99:de:
21:89:bc:8c:0e:02:09:64:50:55:38:95:1e:93:5d:f9:aa:0c:
94:a3:d6:a6:79:38:1b:6d:3e:bf:c2:c2:86:5a:f7:72:0f:c2:
d5:53:25:c5:94:14:a6:7e:21:f0:83:3c:8c:db:98:26:13:49:
9d:b2:16:49:07:1c:21:66:84:5f:7e:79:2a:45:2c:e8:e9:6d:
06:e2:08:de:b7:81:3e:8e:74:bc:d8:41:a7:31:e7:1e:cd:c1:
a9:c2:de:8f:1b:29:ae:25:ff:24:a7:ae:1e:b4:08:9b:88:f6:
99:41:0e:a7:e6:e2:6f:2c:eb:4a:ec:1d:4a:b2:82:5d:c8:f4:
f4:d2:31:7c:5b:fa:6a:93:a4:a8:68:ca:cd:ac:7e:7c:6f:23:
46:34:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:48 2025 by rpki-client