Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3612ffcf-4087-3198-aadd-8da40f43ab54.roa
File: 3612ffcf-4087-3198-aadd-8da40f43ab54.roa (raw, json)
Hash identifier: hRA+e8iWxgtsQRmf+ID6UCK3+Jsx0HOOMN1eWohF2wA=
Subject key identifier: EC:41:B7:F4:A2:19:E8:47:DF:D7:FC:45:AF:F7:DA:95:20:64:52:EE
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848239550BE2D2F8FE03E17B280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3612ffcf-4087-3198-aadd-8da40f43ab54.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 20115
IP address blocks: 98.8.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:50:be:2d:2f:8f:e0:3e:17:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=9f53b9a8-a307-49e6-92ef-a592cabee48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:52:37:1d:1e:65:54:31:3b:c6:48:c5:0b:4a:
97:ea:6c:17:57:03:e3:fd:8d:13:d3:01:23:74:a2:
be:fa:18:32:f7:08:0a:a3:1c:8a:61:13:32:f6:1b:
55:8f:ec:f0:c2:e1:7a:38:46:ee:41:56:f1:45:34:
b9:16:ee:19:1a:9c:6a:6b:2a:ad:d6:93:4c:c2:a7:
d7:95:f0:b1:79:31:9b:7d:df:be:6f:fa:22:c7:d9:
53:89:9e:33:4e:fd:1a:33:e7:f7:f4:e1:72:0d:07:
09:7b:07:bb:cf:69:1d:90:79:0c:77:ad:47:46:14:
c4:c4:41:cd:a5:6a:65:4d:9e:cf:4f:77:07:a8:36:
45:5f:c2:f8:0f:18:ec:b7:a6:f8:e8:d5:99:f1:73:
46:68:95:bf:c4:36:14:0c:21:0c:fd:47:2a:7a:e7:
75:c2:fa:a2:89:1f:2e:67:04:e3:92:1c:53:a7:d6:
cb:62:b3:84:02:ab:f1:54:99:32:88:2f:12:e7:a7:
d2:5b:45:50:68:40:43:af:06:90:8e:62:86:3e:aa:
16:46:b6:3a:41:3f:26:92:a5:b9:89:a1:4d:68:2b:
0f:1f:63:bb:b0:c9:4a:61:13:63:2b:c7:08:ef:5b:
e1:46:a9:21:ef:06:9b:b2:fb:3e:43:74:d0:a5:3d:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:B7:F4:A2:19:E8:47:DF:D7:FC:45:AF:F7:DA:95:20:64:52:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3612ffcf-4087-3198-aadd-8da40f43ab54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.8.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:e0:a2:a5:df:42:9b:c5:f9:38:44:df:7e:18:72:ec:05:e7:
a2:11:e5:93:f6:c2:7f:b4:1a:dc:1f:1a:66:02:d0:2f:24:8c:
b2:94:33:e7:4c:5c:34:5a:08:35:21:26:50:8d:06:bf:18:5d:
ee:82:9a:2e:02:c6:89:05:e0:79:95:6f:9d:a4:ec:05:e6:70:
b0:e0:15:92:fd:8a:97:af:95:bf:58:87:d4:37:f7:a0:11:f4:
25:98:54:1a:c6:a5:f3:0d:94:e8:f4:1e:d4:e1:f2:05:c8:aa:
a1:a5:91:27:6a:c7:d7:06:2f:bf:dc:72:f1:d7:0b:0b:4b:87:
6d:42:e8:78:7e:aa:c7:0c:d0:08:fe:be:71:d9:d4:ec:72:77:
0b:8f:d2:22:f7:2e:99:ae:a5:97:a4:0f:7f:4b:dc:47:fe:9d:
4a:eb:94:65:b4:42:65:5d:c8:59:a9:7b:b0:a6:87:aa:8c:b7:
66:7d:e6:0d:92:81:6e:73:e4:de:fd:cc:88:c3:91:b7:38:7c:
c8:fc:ba:64:c6:51:83:45:4f:d8:d1:36:be:56:56:cb:ad:36:
19:e0:4f:63:b1:51:a7:15:b6:9a:e2:c1:01:54:55:d4:8c:d3:
e0:b6:9a:16:7c:61:6c:66:e4:c4:7c:33:96:68:6a:4b:89:e7:
92:cb:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:11 2025 by rpki-client