Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa
File: 7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa (raw, json)
Hash identifier: SNYFSgBjzLKMrCjYeSav/ItMCbG21fA/bsLislRtjew=
Subject key identifier: A0:22:AF:ED:A0:61:54:21:96:D6:57:BF:CC:55:9C:0F:56:B8:4E:E4
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848239550D09B316D5EFC0AC380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 20115
IP address blocks: 98.8.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:50:d0:9b:31:6d:5e:fc:0a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=cdd29a5b-6dff-41dd-aa5b-195ae636878d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:2d:01:a7:ed:e6:63:27:11:47:81:bc:52:
40:b6:2a:8b:ed:81:dd:51:30:05:56:fe:d0:20:a9:
5e:af:3f:d4:49:2e:93:ae:98:13:60:45:ce:a6:d9:
67:06:36:34:e8:8f:dd:85:8d:a7:25:88:7c:54:a4:
54:b3:72:03:09:bf:29:00:16:ea:17:cf:9a:65:03:
7e:36:79:cd:03:40:0a:ec:e5:61:6e:6a:a9:e0:1d:
0c:22:26:9b:dd:25:f1:73:9b:6e:0a:29:11:6d:38:
a7:f9:48:80:73:e6:7c:50:82:92:b9:4f:45:36:f4:
81:dd:c7:f4:db:0d:8a:1d:f5:79:e6:60:59:cf:d6:
1d:a8:b0:57:25:85:85:40:90:56:8d:d7:c4:70:f1:
a2:7a:30:af:e3:46:b7:2f:1d:88:ff:4b:03:1b:b9:
e7:56:9a:ed:f3:4a:b1:0f:2c:b7:c6:dc:03:71:ca:
34:d2:3e:32:57:d6:61:5e:94:75:56:a5:41:9b:a2:
8a:f3:90:8f:52:32:0a:a5:60:5d:42:ed:1b:c2:45:
77:91:23:12:51:0d:54:b9:fa:c9:27:8c:42:65:13:
0c:96:e9:ef:06:6f:67:48:42:a8:dd:bf:31:74:95:
ec:d8:4d:c1:a6:b7:16:f0:7a:6a:e5:6e:11:67:a3:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:AF:ED:A0:61:54:21:96:D6:57:BF:CC:55:9C:0F:56:B8:4E:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.8.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:49:8a:c4:7e:20:45:4c:a7:4f:a2:ae:ec:b8:05:94:af:57:
f9:ce:5d:94:31:8d:31:84:03:a9:99:f3:d5:2f:05:47:0a:59:
23:bf:73:92:6c:41:4b:3d:48:32:88:cb:25:88:87:a4:c1:ce:
d2:88:6b:5b:49:dd:e5:f0:61:71:8a:8c:4c:c5:0d:59:1d:8c:
22:fc:fe:54:a6:a4:7e:6c:6d:16:f5:a9:d1:67:6d:ec:1c:c7:
01:68:ce:c9:f3:a1:7b:3f:d5:d2:26:6d:81:08:68:88:77:d1:
71:f5:8d:47:97:8d:26:70:38:2f:92:ff:8a:5e:52:b3:53:42:
20:a7:ba:49:d5:b5:62:81:18:ab:03:b5:cf:b3:4e:6a:00:80:
7c:af:fc:1c:d5:57:70:af:25:5d:ef:39:c3:db:e0:9f:de:96:
c9:c7:30:fd:e5:68:3b:a0:1e:62:7e:c8:e1:cf:bb:ce:f8:81:
f1:6d:43:89:01:d4:0f:da:ad:5c:3c:02:33:27:73:4b:17:16:
3a:37:4e:35:e5:cf:b8:45:63:e6:7e:4c:20:7a:73:0b:6c:eb:
c8:f1:fa:59:e7:af:74:87:0c:c5:69:d1:5c:e1:f3:1f:df:bb:
67:aa:00:7c:80:76:7a:1b:09:ea:01:4a:72:eb:95:e1:3c:4a:
6c:32:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:04 2025 by rpki-client