Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/b6669e6c-8326-3596-a803-f8c24a4a9146.roa
File: b6669e6c-8326-3596-a803-f8c24a4a9146.roa (raw, json)
Hash identifier: QI8JAhzpligFxc0a23uEH3PVomjZVOsIS958cLfJ1OE=
Subject key identifier: DC:07:B5:91:4E:16:77:78:EF:64:E7:BA:1D:B7:DE:2F:F2:CD:B7:74
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865304195C7560F7237538FC0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/b6669e6c-8326-3596-a803-f8c24a4a9146.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 98.159.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:41:95:c7:56:0f:72:37:53:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=5dffbcc5-360b-4846-a1b5-8569d3f99809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:9c:84:9e:6a:9f:44:22:20:2b:25:76:9c:
a2:e3:6b:01:ea:40:59:fc:d4:66:23:1c:7e:13:4b:
e7:da:f4:32:3d:ff:29:8c:69:1d:64:d3:bb:c4:c3:
6e:b2:9f:fe:04:b0:a5:cf:53:30:ce:df:e7:20:59:
1f:fc:1f:f5:71:79:cb:f1:b9:11:2d:3d:ca:f2:4f:
1f:3a:b3:89:75:38:ac:ca:69:43:b5:f8:7d:4b:06:
80:7d:08:66:85:df:7b:24:53:ac:f8:81:36:ee:0f:
3d:14:58:17:fd:b8:dd:fc:88:3a:21:13:b1:8d:3c:
58:08:fb:30:4e:98:15:61:8d:19:b6:59:de:2f:16:
4e:e3:63:9a:7d:8b:3d:40:29:ee:ad:83:90:72:7a:
3e:ab:dc:12:a1:5f:70:b9:4a:14:ce:38:e3:d7:07:
98:af:72:49:b1:ff:4e:0d:1d:43:73:7f:83:68:88:
b0:60:2c:f5:e0:ed:b0:e0:73:b2:ce:de:de:53:e5:
50:f6:34:64:a5:1d:c0:cb:50:17:66:dc:56:5c:a6:
15:dd:82:88:99:a1:6d:33:fb:49:a9:03:23:ef:e4:
f5:db:d8:15:a7:1e:c2:10:8c:0e:03:fd:ca:74:8f:
24:d6:65:54:2b:d2:97:1c:99:c5:2c:7e:2f:8c:4f:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:B5:91:4E:16:77:78:EF:64:E7:BA:1D:B7:DE:2F:F2:CD:B7:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/b6669e6c-8326-3596-a803-f8c24a4a9146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:c3:a4:bc:09:8b:39:95:60:0d:60:a8:dd:0f:89:71:37:09:
90:c3:81:1a:b7:17:45:9b:8d:6c:e0:80:a9:3a:b0:53:35:6e:
db:8d:bf:f4:b3:07:c5:32:e4:cd:eb:eb:12:55:5d:0c:ef:d5:
77:82:24:ae:a7:75:b9:e5:e8:df:e8:e3:37:33:7e:ef:5d:5c:
5b:21:7f:f0:ce:ad:3f:cc:fc:a9:cb:f3:f7:5e:60:cf:e9:39:
8c:ee:b6:c6:f6:79:60:49:d6:5f:ad:8d:86:2b:3c:90:67:bc:
df:5c:a2:1a:e1:1e:40:2b:9c:b1:03:a0:6b:f1:91:74:87:56:
5a:16:c7:ec:f2:5f:db:b9:4f:03:ee:3a:ae:7b:e3:02:85:8b:
95:7b:f8:67:da:1b:5a:61:80:35:7d:9b:18:4e:bd:07:c9:16:
63:6c:57:4f:87:85:5c:1b:11:95:48:56:bd:71:b5:18:4a:24:
b9:c0:32:6f:a7:0f:26:e9:75:78:fa:55:04:0c:77:6c:9f:33:
a8:b0:fd:69:96:e6:ea:c1:34:97:4d:4b:e9:04:fd:b9:d2:5b:
1e:bd:b9:c7:82:00:00:05:b6:9e:e3:4d:22:f7:92:4a:5c:85:
77:19:df:4f:8f:0f:c6:3c:7e:31:77:c1:65:de:3a:00:ee:9a:
9b:d3:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:39 2025 by rpki-client