Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
File: aa1f874e-095d-34c7-82c1-8c864143547d.roa (raw, json)
Hash identifier: v1Qr0vBHWkbh4s/mEHqkBU4iu5E8bNu6pjbxhrpabns=
Subject key identifier: D7:B6:26:C5:14:5E:33:12:A5:47:F1:21:AB:3E:29:52:F8:92:00:C9
Certificate issuer: /CN=80a5a637-2442-4c3f-b791-5a2e260822af
Certificate serial: 010D0C9F43285848530AE9CDA421B68F0BF2C980
Authority key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 394688
IP address blocks: 98.142.188.0/22 maxlen: 22
98.142.188.0/24 maxlen: 24
98.142.189.0/24 maxlen: 24
98.142.190.0/24 maxlen: 24
98.142.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e9:cd:a4:21:b6:8f:0b:f2:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a5a637-2442-4c3f-b791-5a2e260822af
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1600c789-3a47-4fb0-9e6a-e39f24157d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:1c:19:93:18:54:3a:16:02:61:cf:b5:82:
f4:7b:79:b9:91:33:e6:36:cc:98:90:10:9f:2c:42:
77:40:ad:74:df:96:fb:2e:f9:55:74:ae:e2:99:e2:
4c:2e:97:49:d3:e2:63:32:b9:d6:f0:d0:49:2b:fe:
6e:02:23:9c:5c:52:f1:04:96:c0:0f:ba:a7:b4:00:
20:17:9a:0c:60:09:b9:30:ab:95:65:e9:bc:65:d4:
6f:b5:c1:38:0e:b0:84:52:a2:3b:8f:64:76:6b:ff:
15:ec:a5:23:6b:cd:1a:6f:ca:5b:2c:fc:db:4c:5c:
2f:52:93:d5:fe:2e:4f:a5:91:c8:7d:95:6e:44:30:
52:89:f8:ff:b3:0d:f2:47:05:d3:63:cc:d4:b9:b2:
c3:28:df:e3:fe:71:cd:52:cd:1a:43:f0:52:15:ac:
c6:26:d7:fa:8f:cf:1c:f6:9b:f5:07:a0:3b:d7:77:
d0:e5:22:61:e1:6d:9f:92:ee:fa:2b:35:60:27:1d:
60:17:d1:54:b3:84:c0:f8:19:f9:36:57:42:33:99:
f7:a0:f6:d8:29:3d:43:5f:02:0d:9f:3f:77:c9:36:
8f:38:c8:2d:3e:f8:34:40:b3:2a:82:45:f7:1b:fc:
d2:06:f3:ba:1f:af:62:2a:c1:6e:75:2b:42:fc:9c:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:26:C5:14:5E:33:12:A5:47:F1:21:AB:3E:29:52:F8:92:00:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
X509v3 Authority Key Identifier:
keyid:8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
sbgp-ipAddrBlock: critical
IPv4:
98.142.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:26:b6:f3:44:d5:69:d6:a9:44:3a:73:bd:a1:d1:cc:d1:05:
b1:80:cf:2d:4b:7b:33:1c:f6:46:d0:dd:e7:5e:7b:d8:04:90:
b6:cf:97:c5:5e:57:6a:11:f3:56:18:e6:e0:cd:57:6b:05:9a:
82:b0:4b:f7:fe:3c:2b:7a:69:c7:4e:c5:c2:96:12:a6:4a:c3:
c6:d0:ce:54:50:7b:cf:3e:07:a0:53:48:0f:27:bc:e4:f8:37:
1b:38:e3:08:34:72:94:ec:36:97:bc:89:4e:83:df:a0:b0:1d:
e9:88:04:8f:f5:2c:81:53:a3:4b:7e:28:47:63:52:c8:f3:50:
73:46:f7:8f:16:c4:3c:c2:e1:02:63:19:bc:9a:4b:c6:7e:af:
43:c0:9b:cf:24:59:d8:91:7c:58:8a:d3:89:bb:55:cb:0f:4a:
1e:db:db:a9:fd:d0:7d:a4:48:0f:f8:0a:2c:9a:83:22:11:6d:
66:3a:cf:36:3e:cb:b5:b9:c3:4e:e0:dd:2b:ed:e1:b9:d8:12:
68:db:b0:81:58:76:56:8a:20:1e:9c:99:15:a0:fe:f5:ad:3b:
d5:9c:97:16:4f:03:1d:bf:7d:ab:82:2b:ec:73:09:c9:81:91:
ff:70:41:1b:43:32:7c:41:54:29:c9:d5:5f:f1:f8:c7:82:b3:
0a:2a:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:37 2025 by rpki-client