Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa
File: 20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa (raw, json)
Hash identifier: 1RGShoEF4W1sYWQWMsDHLrb6oznJiy9jtn+T9vXdI9A=
Subject key identifier: 1D:59:75:D9:02:A3:55:CD:AA:4E:77:A2:3F:0C:F0:AD:5F:6D:62:3E
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858481603AC14792D94D3140F4480
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa
Signing time: Tue 03 Dec 2024 17:22:04 +0000
ROA not before: Tue 03 Dec 2024 17:22:04 +0000
ROA not after: Mon 03 Mar 2025 17:22:04 +0000
asID: 32181
IP address blocks: 98.159.224.0/24 maxlen: 24
173.239.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:16:03:ac:14:79:2d:94:d3:14:0f:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Dec 3 17:22:04 2024 GMT
Not After : Mar 3 17:22:04 2025 GMT
Subject: CN=7ea58766-c364-42ca-9e75-43a635e3a3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:f5:2e:08:93:63:76:68:1f:aa:01:3d:22:
6c:46:34:11:09:f1:d9:96:8e:f2:f7:0d:0e:9d:bf:
f7:a1:eb:d4:ed:cb:00:c2:c7:d4:04:07:37:5a:ed:
22:0c:24:50:66:17:7d:30:d9:30:77:0b:91:a6:7a:
70:ed:36:c3:0a:3e:46:bc:62:c5:59:46:97:da:20:
6f:1b:d2:00:0f:57:42:98:26:7c:59:43:52:c5:e2:
30:a3:a3:65:50:ee:5f:26:7e:a0:1a:8d:c0:ae:5b:
f5:cf:31:ff:c8:fd:8f:19:d8:e9:f9:5c:95:e6:25:
b1:5c:b2:b5:cc:9e:4c:0f:b1:f2:9a:44:70:05:e8:
81:51:3b:c4:e1:48:f2:60:20:27:a2:fd:c5:db:51:
47:32:5f:9a:4a:80:12:9e:3d:d2:41:e2:8e:8b:bd:
c6:8a:1a:15:f8:0b:1b:47:10:56:af:26:5e:2d:46:
9c:f6:49:14:16:4f:ed:75:c5:61:6f:0e:69:15:9a:
52:62:7d:f3:9f:e4:a8:7f:8f:2c:5b:91:28:0d:a4:
83:97:bd:c7:01:a9:a4:9a:45:b0:fd:a3:20:b2:55:
de:2e:e9:d5:e6:68:4b:13:08:99:c6:fa:08:51:25:
38:ca:a7:0e:76:7d:07:d8:af:8b:54:f8:96:1d:5c:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:75:D9:02:A3:55:CD:AA:4E:77:A2:3F:0C:F0:AD:5F:6D:62:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.224.0/24
173.239.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ce:52:a0:49:55:c5:97:ff:0a:b9:e2:3a:f0:3c:70:1a:53:
4d:82:45:26:97:cf:28:33:e1:13:a8:59:c7:09:ad:7f:c8:5f:
a0:12:8c:82:22:b9:78:4e:a1:28:7e:41:7f:51:f8:03:1c:8b:
6f:aa:a3:3c:78:00:36:46:df:8d:e9:b4:25:9a:72:f3:a4:ee:
49:68:7e:80:91:9f:00:7e:bc:fd:ac:91:9e:d2:ee:dc:82:cd:
28:84:d5:9c:ab:f2:2f:92:84:48:ca:c7:3e:56:0d:42:0a:51:
49:ee:d3:74:1c:22:5b:03:8c:ed:56:44:58:e4:06:a0:b5:47:
e0:ac:3e:71:78:fd:48:f8:cd:5f:1b:91:0c:29:ba:dd:d0:14:
39:ce:6c:1a:7e:db:f0:14:a2:b7:e5:09:0b:d8:ca:e8:0e:3f:
ec:02:3d:a6:17:1a:9e:60:2c:c0:0f:07:05:17:ed:de:ee:fb:
43:3e:9b:45:46:98:f2:8c:3b:b0:f4:dc:c0:8a:57:9d:c0:0f:
55:43:50:a9:da:76:d8:5b:fe:07:40:91:5d:2e:89:6b:01:57:
10:da:e8:ac:21:df:d5:58:52:bb:49:72:ae:6a:1d:e7:e7:86:
d0:eb:ee:02:11:92:2b:44:cc:38:63:28:fd:5a:a7:e3:5c:25:
2a:4b:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:11 2025 by rpki-client