Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8a3b8e1-ae55-3be9-a14f-0c96815f9296.roa
File: f8a3b8e1-ae55-3be9-a14f-0c96815f9296.roa (raw, json)
Hash identifier: qgAm8jb9cWqaT/JJl9nefrSZwMxE0hj7L6ZJyAhCcoQ=
Subject key identifier: E0:D2:B4:A1:FE:8B:6C:3D:10:27:0E:3B:4E:73:05:C1:CE:42:90:3A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5A9E032A65210B51BA5240
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8a3b8e1-ae55-3be9-a14f-0c96815f9296.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 98.187.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:9e:03:2a:65:21:0b:51:ba:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=e8cc4fbc-6e4a-4af2-933a-badda010aaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:32:bd:a4:3a:35:44:40:0d:22:f9:8a:9f:70:
72:60:d1:e7:e2:87:f6:b4:a1:bf:9b:1e:39:b8:2e:
66:b3:82:86:d7:1e:ac:ab:67:90:88:71:f8:fd:d0:
4a:2c:9e:de:dc:81:4a:04:4e:18:3b:14:c5:e6:8d:
f9:0d:0c:b5:aa:cd:88:9f:e3:83:ad:e9:41:30:51:
42:7f:75:96:5e:4b:c0:76:de:52:7e:1e:eb:bf:82:
e6:2e:79:85:62:b8:e0:e0:7c:81:85:01:01:9f:2e:
a6:b3:99:86:4e:f9:53:97:08:ac:64:6d:10:26:69:
08:20:af:c5:de:5c:c0:33:53:af:de:23:32:a6:be:
02:fa:64:fc:38:65:78:4b:84:4d:7e:df:c9:27:0e:
8c:8c:ee:e5:0c:06:09:1e:d7:13:8d:62:3a:43:d4:
67:2e:ec:c2:cd:ec:06:1c:db:02:e3:eb:11:c9:04:
96:97:50:73:3d:10:25:d0:9f:d7:00:75:f1:55:92:
0c:e8:ca:ef:fd:fb:2c:1a:64:e3:b1:f5:56:10:e5:
a1:b8:ca:2a:b8:e8:80:40:55:c5:15:22:fe:12:e2:
65:58:66:1a:7d:e4:10:93:f8:be:ff:63:6b:c3:47:
9e:db:59:f2:8f:60:7a:1a:a9:52:a9:24:e7:1d:fd:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:B4:A1:FE:8B:6C:3D:10:27:0E:3B:4E:73:05:C1:CE:42:90:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8a3b8e1-ae55-3be9-a14f-0c96815f9296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.187.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:4e:4b:89:61:53:14:30:25:28:f0:55:09:0e:b0:f5:ce:7c:
48:da:5c:01:bd:cb:81:c3:5f:dd:ef:f3:00:41:b7:14:7f:db:
c0:27:3f:d9:4e:67:18:38:f0:66:50:c8:af:c1:7e:5f:5d:60:
3a:83:00:11:fa:8a:2a:10:ae:61:f4:b2:ba:46:58:1c:b1:97:
42:a1:8b:24:92:57:90:46:76:db:28:7e:92:7b:fa:6a:5e:bb:
e3:7b:65:0e:95:52:13:5a:fc:02:b6:51:13:83:20:af:4a:34:
16:08:f1:a5:c2:59:c2:c3:3c:36:26:4c:9f:8c:f3:c6:a1:89:
7d:cd:86:d7:24:3f:4d:e1:cc:83:d6:da:8f:3b:d0:55:d5:e2:
90:52:e9:23:5f:67:3b:49:b6:64:b6:d2:9a:0a:75:f1:96:86:
d3:d5:de:e5:1c:71:cc:64:c6:7f:d1:45:4c:86:46:2a:2a:3b:
4f:ee:13:1f:8e:f9:28:01:eb:4a:11:8c:49:02:72:6e:6f:1a:
42:46:88:3c:b2:30:d3:ba:4d:8e:e2:71:ce:56:90:08:74:ca:
86:50:e3:79:fd:ee:fe:6c:cc:f4:e9:1c:3b:ab:ab:eb:c1:54:
f2:31:6e:3c:07:a5:76:a3:58:89:94:85:02:02:2f:85:7f:29:
9b:31:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:05:48 2025 by rpki-client