Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa
File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json)
Hash identifier: j9dNA6d82VaopIzLpoJwO6a/DKmwsFiGlUYrH+4SMPE=
Subject key identifier: 7A:B1:70:D7:8C:ED:9A:83:EC:DB:F0:AF:1D:2C:E4:02:EF:16:76:13
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584862658E9759517E87EC8F7400
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 22781
IP address blocks: 98.158.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8e:97:59:51:7e:87:ec:8f:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=730f4f99-bf94-4fbf-a3bd-f4c5fbb31a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:75:44:72:4e:0f:67:02:c1:53:71:2b:03:
24:16:dd:c8:bb:a2:96:9e:4f:36:51:a7:76:78:db:
88:2b:ab:a3:d0:68:69:59:a1:4c:d9:04:96:49:75:
8a:12:1a:cc:b9:15:9b:63:09:ad:3a:c8:9d:cd:a6:
39:f8:ff:3f:ea:be:b6:5a:66:b0:a1:54:f0:29:4d:
0a:c6:da:15:c2:f6:79:84:dd:6f:d3:38:f7:fa:83:
86:66:be:cc:71:4d:74:66:9b:c0:46:6a:7f:04:6e:
b3:3e:20:b8:c4:2d:6a:ab:b4:c1:a4:96:6c:7c:8d:
f0:b6:c3:98:e3:51:98:06:0b:f8:e7:e5:0f:9f:6e:
49:0c:d4:55:00:64:1e:e5:01:a9:47:59:cc:a9:31:
f6:19:71:91:01:37:15:0a:8a:15:8e:74:36:6e:02:
7e:e7:a5:bd:8e:75:cf:77:c8:fb:1d:11:28:05:be:
65:bc:af:00:5a:12:4b:90:40:0b:98:a7:9e:ab:c7:
7f:58:e9:5c:30:6e:00:b1:65:83:a2:0e:69:b3:27:
c7:59:a7:d4:d1:04:bf:2d:41:3a:f1:d1:a9:c4:09:
16:da:d3:e1:3f:38:21:fb:01:07:57:42:22:40:66:
0b:56:5f:6b:8a:77:8c:63:be:cc:85:f2:91:90:34:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:70:D7:8C:ED:9A:83:EC:DB:F0:AF:1D:2C:E4:02:EF:16:76:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
98.158.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:45:49:17:1c:05:38:3c:c5:95:70:26:97:15:56:6f:00:9c:
ed:d4:09:d7:7a:d1:0f:ca:f1:42:c8:bd:c8:bc:da:3a:43:c9:
74:58:48:d7:76:e9:11:71:94:67:b7:31:d0:0d:0b:fe:74:8f:
4b:a4:f7:a3:3b:64:c5:8e:53:7f:f5:6f:9e:54:d8:2c:35:c0:
d9:e1:81:02:48:70:42:79:a0:9c:9c:14:39:a3:60:ec:41:98:
6c:5b:f7:4a:74:c5:fe:7c:11:14:12:4b:b9:2e:b3:a5:6c:37:
75:9f:2b:09:69:d7:27:b7:c7:3e:1a:d2:2d:6a:db:3d:41:81:
f0:27:43:2a:cf:f8:00:5b:be:45:06:81:c4:02:9f:e3:8f:0b:
47:6c:02:88:24:fe:33:86:8c:77:14:24:e1:65:5b:87:df:21:
3f:6a:2d:5b:31:d7:22:f8:0c:cb:7d:5e:09:b0:27:e8:c3:d6:
17:21:fb:68:91:29:f8:90:34:3b:dc:5d:f3:1d:bd:89:93:d8:
a7:94:b2:2b:89:62:41:fb:ca:07:be:ec:72:d5:c1:25:10:cb:
3f:ad:ab:91:5c:10:9b:f5:00:2d:3d:fd:2a:67:c1:b1:5b:f7:
bd:a7:89:83:06:d8:bf:35:0d:5c:07:bc:eb:c0:18:0d:45:b2:
e0:0a:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:41 2025 by rpki-client