Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab0f4a98-74c3-300f-a5d6-ce509494d48d.roa
File: ab0f4a98-74c3-300f-a5d6-ce509494d48d.roa (raw, json)
Hash identifier: 932s8msOLKdbU8UQQdxcn+3RLiFTu17DHMbAiaKKNx0=
Subject key identifier: 47:64:B2:B6:19:3E:EC:1D:E7:C3:42:29:C4:2A:96:17:60:84:3D:1F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858484515956F698198EB4AF20510
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab0f4a98-74c3-300f-a5d6-ce509494d48d.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 22773
IP address blocks: 98.161.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:95:6f:69:81:98:eb:4a:f2:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=eb51c147-7fed-4440-9a79-a2ab3c8a7128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:0b:28:66:69:61:0f:8e:48:61:41:43:fd:
33:c1:59:af:86:b1:70:2a:5a:b1:be:24:22:e9:f9:
8e:21:bb:71:72:37:6a:51:e2:eb:d7:e9:e2:a0:8e:
d6:12:8f:0c:9d:fa:a5:3e:aa:e1:16:89:cd:26:3f:
65:7d:15:7d:27:fa:e2:b8:e7:e9:47:d1:3e:9e:18:
65:6d:f8:f1:7a:b8:e4:cd:74:2d:99:7f:89:ad:56:
e3:70:3d:0c:27:3d:e1:56:e4:e6:3a:85:ee:ba:c2:
df:db:a4:56:6a:f8:77:8e:f6:39:c5:52:1c:12:e4:
2c:a9:8e:7d:6b:a2:9f:e9:26:80:71:c6:3f:a2:90:
ec:f4:33:42:05:b6:f6:9a:b6:fc:1c:44:2c:1d:ba:
6f:a1:7c:12:99:b0:fc:ca:09:81:da:de:f2:95:c7:
5f:f8:d3:a8:42:c0:d3:0b:5d:b6:7f:bf:6d:dd:49:
d9:b4:6f:f3:35:53:77:16:14:e2:11:7d:6f:88:a4:
e8:c6:fc:18:d4:8f:09:09:b8:ee:0a:a5:fd:df:45:
0c:60:0b:87:27:bb:f1:1c:ac:9b:bb:38:80:da:8c:
9a:f2:35:15:32:21:80:0a:3a:7e:c4:6e:2c:82:27:
65:be:ef:0f:f7:45:45:ac:2f:54:3c:bc:28:fd:97:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:B2:B6:19:3E:EC:1D:E7:C3:42:29:C4:2A:96:17:60:84:3D:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab0f4a98-74c3-300f-a5d6-ce509494d48d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a5:37:3f:40:60:e3:04:46:10:1a:74:ee:8f:58:0c:e2:0a:
c4:8d:bb:73:03:1d:61:06:52:9f:5e:9d:7c:28:33:c4:e2:0f:
d4:de:05:92:38:f1:1c:de:43:33:08:f1:b8:e8:9c:9f:b3:31:
9f:3a:fb:2b:fa:64:60:a8:65:eb:66:27:f0:d1:d8:41:d6:ed:
b5:52:f4:42:e7:7f:09:51:ee:95:8f:48:2a:9b:b0:84:3c:b0:
b3:9b:15:70:d8:bc:d5:f7:3f:a5:de:c7:97:26:a6:df:e7:84:
92:c7:f2:28:98:68:ba:e3:48:d2:42:ea:d1:21:7f:bd:71:dc:
df:5d:3a:fe:fd:88:c3:1a:92:c5:8a:23:a2:8a:8e:c5:57:a4:
1d:dc:10:6c:fd:fb:0c:23:6a:1b:ce:9d:a5:80:65:a0:a4:d3:
f6:4d:a6:bd:e8:46:6f:40:d8:5c:54:1d:53:5b:12:45:a0:7b:
c9:74:d2:6e:cc:71:bc:54:fd:11:f9:07:0c:d2:bd:8f:d2:0f:
81:ce:9e:48:9f:15:a4:69:57:26:07:8c:05:5a:02:af:9d:a9:
2f:2d:f2:bf:2b:9b:35:94:16:7e:d0:f7:b2:24:66:09:ee:1b:
38:1d:55:81:60:c2:04:fb:d9:07:e7:26:d8:25:ba:c6:01:9f:
d2:24:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:29:35 2025 by rpki-client