Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d92819e4-effa-3729-9533-50f48d0149da.roa
File: d92819e4-effa-3729-9533-50f48d0149da.roa (raw, json)
Hash identifier: iWyOSx2khAsqutFDBWzNd8QEyTcvKfLXbR+qAEu+bS8=
Subject key identifier: 70:33:68:E0:0D:3B:A4:08:B6:BE:7E:27:96:45:60:F9:70:90:13:BF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD0347C30C850B73799FE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d92819e4-effa-3729-9533-50f48d0149da.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 172.235.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:34:7c:30:c8:50:b7:37:99:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=f900c863-2c21-4c9a-87dc-ab6d4ab549aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:08:51:b8:8d:aa:b6:c7:7f:d5:b7:f8:5b:
aa:22:e0:8e:9b:25:54:89:0a:fc:a6:ed:3d:12:95:
b1:61:0f:5c:63:dd:b1:ba:24:08:84:8e:0c:cc:c3:
db:a1:b0:0a:7a:cf:e2:52:d9:6c:c3:97:ba:30:01:
e5:35:ca:8e:04:60:39:81:7c:17:d8:2a:86:3f:30:
14:78:2d:f9:38:ba:c8:71:9a:78:7b:83:11:3b:e8:
2c:f3:3d:39:e7:db:8e:95:54:43:c1:97:24:96:8d:
3a:a8:98:08:0b:d8:fc:4e:68:02:25:ed:37:96:bb:
5e:33:d0:2e:c7:a9:13:a4:ff:dd:5c:e1:a0:2e:99:
bb:cb:89:18:72:ba:00:c9:a1:7c:14:70:5b:2f:b1:
0b:20:68:4a:bc:8a:b4:a8:49:6f:27:4d:dd:d0:2f:
e4:bc:46:0d:dc:05:6c:04:7c:dd:46:1d:b6:ad:80:
d0:80:ae:02:99:c2:84:70:21:d5:f2:5b:35:52:59:
50:5a:22:24:f0:d2:40:c2:aa:b3:6e:c9:31:26:a3:
df:b7:f0:c5:11:6c:ec:8f:e0:7a:4e:a7:5c:79:12:
ac:7c:c2:93:9b:ea:c4:70:2d:0c:34:63:24:04:c1:
46:67:f0:70:5e:24:18:23:77:41:cd:41:88:05:0f:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:68:E0:0D:3B:A4:08:B6:BE:7E:27:96:45:60:F9:70:90:13:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d92819e4-effa-3729-9533-50f48d0149da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ce:7b:f4:44:ae:81:3c:64:8e:e3:26:32:6d:20:f4:01:21:
ac:0a:5c:13:b7:42:63:e6:ea:be:55:d6:cf:6c:94:74:6f:07:
66:21:c5:94:07:37:cd:f6:15:07:e2:b6:a1:36:ff:01:bf:8b:
1a:5d:89:04:54:a6:fe:9a:fa:78:72:52:d7:5f:e7:ee:db:e5:
83:0a:f9:b8:3f:b3:99:0b:28:1f:5e:6d:e7:81:e2:ad:bf:96:
39:45:f2:03:3f:b3:20:a2:86:3c:82:06:58:3c:d7:3a:5d:44:
93:4b:94:2c:8a:03:d7:e3:97:ff:fb:8a:d9:e1:a6:6f:19:6e:
90:5d:7a:f4:0c:8e:0b:bb:c6:63:94:70:db:fd:a9:24:80:ff:
55:05:54:19:50:8c:de:76:ab:f6:52:4f:1f:42:a2:9e:77:e4:
b3:f2:3c:99:df:1c:18:f8:eb:f4:e5:46:ff:02:65:c9:9e:f4:
86:19:9a:a0:fd:9c:a9:c3:02:27:80:03:9c:72:f2:75:cd:9f:
85:7f:1f:35:99:06:98:48:4c:68:f9:dc:b6:da:a3:54:df:ef:
7f:63:76:c4:c4:e6:cf:0d:75:32:c6:69:dc:cc:1d:b8:d3:1e:
98:7d:cd:53:72:76:d6:0d:0b:da:14:39:ee:56:ce:5a:ba:3f:
6b:57:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:51 2025 by rpki-client