Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa
File: e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa (raw, json)
Hash identifier: oYwnwxxuM7hsquu3TtwqzpY4Qq1EYZ0X8gG7PdjKtDk=
Subject key identifier: C7:A5:0F:AA:5B:E4:2B:FF:CD:DC:3E:0E:CC:CB:37:C6:56:CA:29:CC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5A9D68A7C3E05E647F1C40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 98.161.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:9d:68:a7:c3:e0:5e:64:7f:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=3be27dd3-a3f6-489b-a1fe-aa0f72497869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:43:1b:1a:ff:d3:96:c2:2b:32:6b:82:f9:
03:34:3d:35:50:98:13:48:34:30:c6:17:5d:fb:54:
cf:32:35:e1:c2:1e:32:09:ae:4e:36:38:d6:55:3a:
a3:ef:4e:fe:dd:86:ab:27:03:a3:33:7c:18:e5:09:
d6:25:8b:99:d0:24:50:e0:1b:e9:02:94:19:13:c9:
7e:96:e8:e9:7f:e8:7f:0f:db:7e:89:9b:3f:d4:a0:
55:e0:f9:43:79:22:de:1e:2f:ef:34:75:7e:1b:e2:
1f:18:87:6b:e3:77:f0:1f:3c:9c:d6:f1:87:a0:6a:
ff:d0:07:4f:06:7c:1c:47:7c:73:33:99:59:1d:e4:
d4:0e:0f:7a:34:bb:8b:5c:39:5d:63:c6:1f:0e:7b:
fc:9d:6b:51:92:99:46:cd:83:83:56:20:f2:cb:50:
aa:9c:fc:61:b3:a1:3e:89:c0:62:c6:e1:92:09:0b:
72:c2:07:aa:b7:8f:b2:7f:0b:19:8a:64:f7:58:6b:
ad:6c:05:a5:61:8b:27:5a:93:4b:fa:e6:78:b4:3c:
9a:cd:df:b5:10:01:08:87:08:78:94:32:eb:ec:e7:
e5:20:66:7c:94:20:4c:6c:83:99:71:bc:92:33:9d:
ef:4b:0a:23:f1:df:88:16:aa:fe:3f:93:e5:f5:41:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:0F:AA:5B:E4:2B:FF:CD:DC:3E:0E:CC:CB:37:C6:56:CA:29:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:ed:53:9e:2d:74:3e:37:ee:ad:16:1c:ed:c2:4a:f4:92:38:
a5:79:40:9b:3c:94:10:1e:44:ef:7c:07:73:74:3e:7e:5a:96:
0e:74:d9:10:41:c4:d7:be:fe:81:0f:ef:7c:10:ee:b8:6d:42:
19:06:d8:6f:e9:52:1d:c7:93:a8:bd:05:70:4b:f6:69:99:0c:
f7:f0:03:e7:6f:ab:b2:71:61:6c:bb:74:1c:a1:68:0b:dc:9f:
a2:54:cf:b9:95:67:98:b0:41:8e:d1:5b:ef:8d:8c:88:7a:ba:
ee:ae:f6:89:59:3d:c8:1e:1e:4b:97:22:02:b1:36:77:f3:ea:
07:a3:66:c1:91:c1:33:5e:07:d2:b0:0c:b1:5f:fc:a2:2e:33:
a8:1f:e5:95:84:d1:f2:77:7e:2e:39:58:c7:c8:23:ad:ec:b8:
06:3d:b2:bd:9d:4a:77:b6:0d:7f:e0:87:24:08:a6:da:a0:82:
06:76:0b:d3:20:cf:7d:72:95:b6:fa:92:14:d8:10:4c:ab:49:
41:ac:e0:31:56:f6:50:03:33:3f:e7:a7:3b:0c:e2:ba:7a:e8:
e3:e9:da:7a:07:95:51:f9:62:2c:47:6c:f1:cd:dc:17:52:b5:
bd:a3:5f:bc:78:1f:68:a3:36:8d:e7:99:08:6e:a4:51:da:5a:
60:ca:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:26 2025 by rpki-client