Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c67e81ff-83c1-32d6-a23f-538cb9136f00.roa
File: c67e81ff-83c1-32d6-a23f-538cb9136f00.roa (raw, json)
Hash identifier: bmD+XvZk8hfOhiytrGqpaQB5AqUCucqJoW9x7xc/dD4=
Subject key identifier: 80:EB:07:2A:94:1B:9B:06:76:6C:E8:5C:B1:D7:FF:C2:31:9F:64:C2
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487CEB2D371405D90267F70080
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c67e81ff-83c1-32d6-a23f-538cb9136f00.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 139341
IP address blocks: 98.98.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2d:37:14:05:d9:02:67:f7:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=aaf19f0c-6151-4da0-b75e-aa9903c69fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:24:84:3c:db:a0:68:c2:03:31:18:c4:e2:
df:5a:04:05:92:70:13:99:f8:34:19:6a:34:40:32:
b6:2f:15:89:2a:81:62:44:f3:97:3c:ea:d3:16:45:
e5:9a:ae:56:55:04:46:70:3c:9c:1a:05:80:09:c4:
d5:23:bb:da:06:f9:96:1f:7d:6c:7c:ea:22:78:d0:
a6:08:b9:97:01:1d:4d:76:2e:12:fe:2c:44:5a:d3:
f9:a0:f5:e5:be:52:3d:cf:09:58:88:4d:92:89:eb:
4a:1b:de:8f:36:9b:4b:c1:30:87:4c:23:a5:ec:16:
27:a3:8f:93:14:79:4c:7d:51:8c:35:d9:08:3b:bc:
3b:d2:b3:7f:9f:9d:92:96:0c:d7:d6:90:8c:ad:69:
b5:51:f4:06:3a:d7:81:76:a5:c9:bc:04:cd:12:7e:
8a:80:4b:c5:4f:12:54:3d:ff:d5:49:e5:5b:8d:cd:
2e:de:1a:69:9e:63:8c:bd:2a:1a:06:6b:9d:d3:20:
4b:dd:93:7a:98:bb:d3:9a:63:f2:9b:88:d3:a4:60:
ad:f5:56:b3:17:8b:9a:5a:53:86:e5:c5:82:63:38:
48:c7:23:64:9c:2f:99:53:09:19:66:2e:93:62:ce:
fc:af:c0:bc:ae:4b:5c:1c:4c:de:7b:0e:c9:e4:ac:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:07:2A:94:1B:9B:06:76:6C:E8:5C:B1:D7:FF:C2:31:9F:64:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c67e81ff-83c1-32d6-a23f-538cb9136f00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:9d:7b:b2:1c:bb:50:1a:fd:70:6d:72:0d:c2:be:a7:c0:0d:
ac:6d:e3:e7:fd:f1:e7:5a:04:af:f7:93:e0:ca:7e:1c:19:ca:
2d:3b:02:75:d4:95:ee:a7:c5:d1:99:44:41:e4:da:7f:cf:23:
e6:85:62:25:92:2f:cd:86:33:d1:f3:1e:42:42:18:b9:4f:e6:
67:02:7a:c0:b2:b5:96:30:bc:2a:65:a3:98:f9:41:f3:a7:d6:
10:f1:b4:09:67:6a:0a:79:0c:d4:2c:0d:c4:c8:45:90:7d:08:
42:79:f4:cd:d7:f0:f2:1f:d2:0e:24:69:31:c7:0f:45:6e:41:
df:9c:69:05:89:7d:6c:c7:7e:32:f1:83:2e:9b:0e:64:cc:ae:
f5:46:3a:de:ae:52:14:ed:e0:d3:14:69:27:7f:c0:b2:a2:1d:
2b:c2:57:14:50:68:a8:15:8f:11:e3:3d:29:2e:63:b8:80:eb:
f0:75:20:e8:ac:4d:d8:17:10:6c:58:52:2e:e2:87:f5:ac:c1:
63:6a:1f:a9:6e:37:3b:d6:3c:00:2c:48:da:cf:52:98:51:80:
b7:3f:0d:23:6c:8a:82:5a:fc:93:02:d3:b7:87:7f:88:15:6f:
49:73:9d:a1:3b:2f:f6:9f:44:00:32:8a:dd:67:f2:53:47:65:
cd:33:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:52:09 2025 by rpki-client