Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa
File: 5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa (raw, json)
Hash identifier: Aje/v1cVohwgu/JR6UF7+qo36L8c0diWHRSXTxDmojg=
Subject key identifier: 86:A5:D7:C3:A5:C1:7A:0E:F8:89:1B:0D:EF:68:0A:DD:CD:D4:05:57
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5A9D2713316403F9558700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 98.161.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:9d:27:13:31:64:03:f9:55:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=0611151b-45de-4406-b2e3-5a6101de7cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:be:4e:8e:e7:0b:2e:3a:79:08:8f:ea:39:
50:f7:e4:67:3f:94:c5:e6:62:82:a5:63:e9:93:7c:
6d:83:8a:8d:ae:63:ed:cf:e5:df:de:ca:de:ec:2b:
5c:3a:e8:d8:bf:9a:3b:71:05:5e:73:ed:c3:33:c3:
54:a6:62:49:77:90:8b:2d:53:4b:8f:c5:34:31:d6:
17:43:ef:4c:ad:5d:8a:cd:68:94:e2:b6:23:bf:74:
a6:f4:21:5c:0a:d7:ca:bb:2f:04:15:df:48:10:7e:
b5:07:de:05:72:b6:ed:e8:6a:f3:a1:1e:4f:ea:19:
38:b7:c8:f1:7e:aa:5c:10:bd:00:c8:9c:88:4e:38:
80:c0:72:77:08:88:4f:4c:5c:8b:f0:93:17:5d:17:
ab:61:0a:59:80:0d:31:ae:4e:ae:cb:d1:e3:6d:ae:
7c:63:23:b5:2a:08:08:6d:85:99:96:24:99:16:64:
40:5c:fe:e3:9d:4a:17:8a:4c:ea:29:07:35:5f:52:
20:b7:15:4c:be:12:b4:59:c5:27:cf:4b:ac:d3:6c:
f3:42:f1:6c:a2:cb:1b:8f:3c:89:e9:df:46:bb:36:
c7:7a:a6:d6:1c:43:3d:c9:dd:b9:cd:19:0d:0f:28:
20:85:69:b1:6d:aa:08:d6:9b:ab:20:08:af:5e:36:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:D7:C3:A5:C1:7A:0E:F8:89:1B:0D:EF:68:0A:DD:CD:D4:05:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:7f:05:65:7d:ed:5d:49:92:5c:3f:28:38:96:1a:38:e0:3d:
f6:a6:2e:10:d4:66:9b:bf:e9:36:d3:d7:f3:8b:ee:8f:5e:3b:
9c:20:2c:6f:69:56:87:5c:5a:e9:b9:ba:c2:68:50:46:8c:99:
2c:bd:62:9b:2f:ed:0b:74:a4:e0:2d:b3:39:ad:04:db:c7:ea:
fe:6b:74:2d:65:43:79:49:86:38:30:31:23:e7:84:d8:3e:72:
65:8b:72:31:c7:dc:37:92:6f:2a:23:70:a6:f6:30:0a:c7:22:
9e:c0:69:e2:e2:c1:fb:a0:85:87:64:16:50:62:90:ba:ad:d5:
f5:30:62:16:23:6d:77:aa:1b:ec:ba:c9:39:a6:2f:9a:6d:a2:
e4:07:0d:17:c0:5c:b7:e5:25:10:a6:23:99:bb:73:e2:d6:90:
99:93:32:cf:32:d9:01:0d:8b:ce:ed:16:3c:e3:5a:56:88:0d:
77:82:78:e8:63:da:60:a8:07:9a:0a:7f:6d:8d:cd:dd:4b:07:
67:27:a2:d4:ca:64:80:3a:a9:21:1c:6d:c0:8e:54:c8:61:14:
11:3a:8d:78:85:eb:01:cd:8b:3b:65:60:07:91:b8:a7:0a:b4:
49:d5:65:76:55:59:3c:26:4f:60:e6:a0:30:fa:5c:29:59:6d:
bb:91:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:21:09 2025 by rpki-client