Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e865d86d-d3b7-3890-b9bb-4f6d25267764.roa
File: e865d86d-d3b7-3890-b9bb-4f6d25267764.roa (raw, json)
Hash identifier: Plo0wPI2bOTg/tpaGroT46sG3Ooj1iWDbxqzjRta61U=
Subject key identifier: FF:9B:A4:B8:A0:78:C0:68:21:32:5F:EA:67:4E:50:92:04:96:2D:F7
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8A44F39298CFE807D200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e865d86d-d3b7-3890-b9bb-4f6d25267764.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 98.147.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8a:44:f3:92:98:cf:e8:07:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=fcc22e20-b8d8-49e3-bb45-15feed172c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:3e:d3:bc:8b:d5:76:e9:16:1b:cf:16:99:
e4:6a:7e:50:ab:25:4b:ad:96:72:29:a8:98:6d:3f:
cb:1a:41:31:75:c1:3c:15:f1:c6:8a:89:19:b0:29:
32:6c:51:7d:f4:7b:86:06:a9:ff:6f:a5:21:f8:80:
fb:85:02:14:70:2d:61:c6:50:f2:f3:51:70:80:7e:
6f:ae:1c:07:67:0e:90:ce:6d:91:18:cf:74:04:9f:
40:45:26:b3:e5:22:93:23:f3:50:e9:de:0b:33:2a:
29:3d:97:13:47:69:0f:58:fe:f1:7f:4e:2d:32:b8:
d8:b0:92:9d:d4:38:36:20:ec:0c:7e:ba:ee:4e:74:
31:5d:7c:c6:b8:ec:20:0d:e5:97:e3:77:9f:04:bc:
2b:13:8b:18:03:4c:86:ec:0a:28:8a:da:28:49:21:
e2:7f:2a:80:06:aa:cb:07:f9:ff:c5:db:f3:a2:51:
d3:55:e5:3d:e5:34:31:ba:23:58:f9:d0:77:ca:60:
f8:06:16:ee:76:08:52:c6:f0:a0:01:70:a8:e6:f1:
c5:bf:83:37:4b:e6:10:c0:3b:a3:e8:07:a9:ef:1a:
c6:87:0b:04:0b:d5:85:d1:4c:01:b1:74:f2:1e:9f:
01:94:ad:48:a0:82:9c:5e:64:b5:86:fc:eb:54:b1:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:A4:B8:A0:78:C0:68:21:32:5F:EA:67:4E:50:92:04:96:2D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e865d86d-d3b7-3890-b9bb-4f6d25267764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.147.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:92:29:50:38:f0:3e:13:53:6e:c5:6a:70:7e:23:f1:85:ac:
f3:ea:17:ea:5a:74:fc:87:43:d0:e0:1b:1f:ea:14:a7:1d:1a:
fa:f3:60:e9:dd:02:f2:5f:61:75:08:f2:ca:01:d8:ef:6a:80:
f3:0e:9f:19:c7:7e:65:94:57:30:32:0e:1c:2c:36:09:27:82:
2f:6c:40:79:e4:79:e0:81:4a:39:27:1c:89:ce:2f:a8:eb:88:
56:35:1b:a1:9f:29:23:1b:fd:c5:84:51:f4:3c:a9:8f:df:92:
82:28:1b:94:4f:ac:96:89:f4:54:48:dd:69:11:af:38:b4:27:
34:46:a4:2b:6f:73:99:78:b1:d7:c6:ed:dc:1f:d0:f6:24:37:
7e:cc:e9:84:69:63:d6:5f:7d:4e:d8:05:fd:5b:97:b8:bb:17:
56:d7:99:36:d4:15:51:1c:c6:72:3e:7d:64:a8:e3:bc:c5:29:
56:fd:6c:8d:b4:94:b9:53:40:53:8d:72:f8:8c:9c:79:90:9e:
31:e5:df:70:42:4b:59:96:c3:00:47:ea:3c:48:bf:4b:23:0f:
61:c9:16:81:53:a0:b6:fc:53:39:76:8b:6c:3a:b0:24:0e:1e:
30:12:cd:35:64:dc:31:94:be:69:0b:36:6b:17:26:f6:fb:3a:
2f:5c:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:03 2025 by rpki-client