Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa
File: c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa (raw, json)
Hash identifier: tMbtLCUm40ngFDHf2XsTk7KvcTPwU/DAezfMP71ooIc=
Subject key identifier: F4:79:88:FD:4B:2A:15:26:75:5E:5B:FD:41:D1:07:11:99:B5:84:C0
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584847E02AD08FC9D22CD092B7EA
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 21859
IP address blocks: 98.98.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2a:d0:8f:c9:d2:2c:d0:92:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=9a737104-be22-49f2-82e1-912765f495d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:ef:af:5d:d3:1a:5f:21:8d:19:84:0e:80:
37:43:64:17:49:e8:b9:18:18:f9:1c:3a:98:e7:33:
fd:50:c8:1a:a1:04:d3:bb:0d:71:96:f9:46:f5:86:
f3:09:21:d4:58:ed:b1:e4:27:5d:36:7d:e7:a9:99:
7c:d7:26:1c:96:e2:1b:99:7b:34:58:81:72:28:b8:
8e:ab:d9:39:07:40:48:81:04:d2:cf:fe:be:c8:35:
68:30:0b:6c:17:1d:99:fd:dc:a9:4d:f4:e7:30:c4:
8e:94:6b:28:88:4e:81:b0:b3:3d:a5:fa:0f:df:76:
51:60:16:f8:9e:01:9b:a4:85:3b:95:33:ee:67:9e:
d0:28:35:1d:5d:73:35:da:19:95:9a:63:89:fe:27:
2a:c7:f5:66:ae:10:af:0b:1a:84:ee:67:1c:f6:ff:
02:10:e5:eb:c7:d6:d7:dc:d1:3f:11:64:6b:80:cf:
20:a2:b5:b2:9a:b7:75:cd:dc:8b:e1:41:a9:80:f7:
ff:d1:f2:98:e6:41:c0:62:2b:21:c7:22:b1:25:5a:
b0:70:dd:35:00:61:42:57:31:97:19:a5:a7:f9:f2:
0c:b9:3d:31:25:b4:84:c1:dd:76:e3:23:40:d0:6f:
11:98:a2:54:53:5e:a6:ea:7b:0a:4b:33:93:f4:fd:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:79:88:FD:4B:2A:15:26:75:5E:5B:FD:41:D1:07:11:99:B5:84:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b0:95:44:39:6e:10:46:07:a9:94:11:46:71:2e:1f:89:9d:
e7:9c:a2:62:f5:8f:e2:ec:04:d9:91:9e:6b:11:3f:fd:d3:03:
32:99:57:36:d7:79:9c:db:6b:0d:b6:41:80:19:ab:f1:43:8e:
62:2c:51:5e:ad:50:33:3c:6e:b3:7b:b5:3c:2f:7d:66:f7:90:
f4:65:29:a1:8d:c9:11:7b:04:10:f7:f3:6f:66:c4:14:bf:f0:
22:d1:18:1d:a8:26:fe:d4:e1:c7:0a:34:30:cf:6a:d4:aa:7c:
2b:d1:a7:f2:41:9c:75:63:9e:3e:a2:a3:d6:26:2b:aa:96:4d:
37:2d:e7:b8:cd:bb:fa:62:0a:cc:d4:8d:c1:8d:62:a5:5f:4e:
bb:0c:8c:ea:57:6c:50:51:c0:36:f0:f8:3d:a9:d4:f9:ab:76:
c9:89:02:3d:fe:90:fa:76:94:0c:7b:54:60:59:7e:38:14:9c:
63:d4:44:ff:cd:49:05:9d:3d:7d:a0:40:6a:37:93:d4:ba:18:
a1:bd:02:b7:54:c5:c3:d1:4f:34:10:4a:5c:d1:e8:f8:34:f4:
80:4a:65:ad:74:14:61:d3:a6:3a:20:73:e9:e9:e0:c3:c3:17:
14:a6:3b:99:7a:95:86:e8:9f:c0:39:9d:e4:af:07:23:0c:b3:
5f:cd:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:37:51 2025 by rpki-client