Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
File: cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa (raw, json)
Hash identifier: qW6dSHR145Jwo5J06sowT64SDsrzVWqcCzMlvxhHjL8=
Subject key identifier: 90:08:EC:4F:CE:77:88:F0:5E:E4:1E:85:88:F7:2B:D2:92:55:6E:63
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F052A636EFC8C002A1A1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 98.114.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:52:a6:36:ef:c8:c0:02:a1:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a3312f7e-14eb-4a76-90da-b62ee5e00923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:ae:86:01:fb:86:99:83:bc:01:1a:9c:b9:
ab:25:77:f0:1e:c9:65:82:6b:31:20:a5:4c:c0:d1:
33:1c:7f:5a:a1:1b:41:47:aa:a2:61:50:a5:7e:71:
8b:98:74:42:0e:df:8c:f0:d4:9e:f9:84:b7:51:92:
dd:71:19:98:39:d4:88:4a:fb:50:08:2d:76:a4:b5:
b5:c7:95:7e:38:9b:5e:2f:5e:c3:36:d9:4f:46:34:
51:ef:80:86:c9:89:b4:72:fc:ec:39:cb:ac:85:0e:
90:d2:65:a1:b2:40:fb:e0:72:07:3c:00:bd:e1:13:
b3:8b:4d:c4:8d:6c:f7:95:db:ad:80:a6:2c:44:d8:
3e:c4:e3:97:67:16:8d:23:6f:38:3b:8e:90:db:49:
54:cf:1b:4a:ec:92:f5:a9:89:47:bd:e8:13:94:c3:
96:0d:37:6d:c8:05:24:0f:29:2f:0f:a0:f5:db:f8:
de:29:0b:f8:33:c0:c9:32:4d:73:6f:1b:20:36:49:
58:43:86:f2:27:e9:bc:ff:93:45:29:dd:99:a9:bb:
87:7c:46:51:f7:59:57:cd:92:8b:34:a1:b6:57:e9:
22:f6:5b:1a:f1:3f:09:56:6f:3a:2a:42:5c:2a:cd:
f9:41:36:70:41:36:c5:9d:bf:59:4b:f4:c9:21:2b:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:08:EC:4F:CE:77:88:F0:5E:E4:1E:85:88:F7:2B:D2:92:55:6E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:22:59:0e:ff:10:17:e3:e9:c3:a0:92:b5:23:ef:e4:69:db:
6d:73:53:6c:e3:84:f4:b6:1a:51:ad:58:fa:45:e4:92:0b:06:
9b:f5:3e:44:93:04:e4:14:71:ba:f9:91:5f:27:a7:0f:5a:df:
b6:80:7a:e9:e8:11:5b:90:eb:95:13:a3:dc:bc:fd:d7:95:bb:
d3:e5:5b:29:2c:78:02:7d:31:0a:42:65:e8:e7:7f:a4:83:f8:
81:c0:3a:4e:a3:b5:6a:7d:63:f2:c4:a4:35:5b:94:7f:05:aa:
ae:e4:e3:64:87:b0:ce:74:d3:38:43:fd:44:75:34:b9:5d:b3:
be:12:ff:06:27:92:bc:c6:3f:fd:a8:80:76:90:1c:c0:e0:ec:
7b:08:24:15:8a:dc:fe:bc:79:e0:65:12:f2:32:ee:32:f5:19:
11:64:10:f2:6e:b8:35:5e:b5:be:68:d7:d6:08:bb:58:eb:0a:
9e:a2:a8:a2:c5:c8:51:91:97:d7:a2:0a:5a:3a:2b:ef:0e:27:
c6:d3:09:44:25:c9:ab:ee:5e:df:8d:ea:40:e2:27:c4:14:cf:
c8:75:eb:2d:4f:fa:91:b0:54:b0:39:20:7e:24:58:a8:65:c3:
bb:09:06:db:e0:a2:36:83:6e:bf:b3:c4:62:64:33:76:8c:45:
a3:42:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:57 2025 by rpki-client