Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5239a28-51f2-3c2f-8fb3-4947ab9c0347.roa
File: e5239a28-51f2-3c2f-8fb3-4947ab9c0347.roa (raw, json)
Hash identifier: Q9q2/UolgK7QtXdcVcRlhP/dh+rqxnULuNpXowtoc8U=
Subject key identifier: F9:38:67:8D:95:43:2A:1D:9D:98:59:DE:A0:E3:D1:EA:44:F8:C9:FF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04F6A6A4F035F621A7460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5239a28-51f2-3c2f-8fb3-4947ab9c0347.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 98.117.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4f:6a:6a:4f:03:5f:62:1a:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=2f0dabe1-f40f-4b5d-8b79-8b092f523436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:fa:ec:12:70:42:58:a8:35:18:d9:95:96:
8b:31:16:85:9c:86:6d:b0:97:d6:dc:92:25:f3:87:
67:04:2c:d3:2c:51:21:98:c1:fc:4b:49:c0:71:eb:
6a:22:c2:23:c4:45:7b:dc:11:98:cf:24:f1:aa:41:
c9:ef:25:db:e2:0d:5f:40:13:ec:e8:db:fa:e5:61:
57:86:d8:fa:74:45:d8:c6:d4:ba:ce:0b:ab:4d:00:
67:d5:59:7f:7f:86:f1:78:ce:46:ba:26:62:ba:cc:
1b:86:98:51:aa:a0:1c:83:e2:6e:9a:e5:80:80:ba:
f7:b3:20:d1:2e:29:e5:53:a9:7d:66:8c:b9:6b:57:
b0:5d:ba:86:9e:bd:4c:17:ef:97:b4:ac:b1:91:18:
bd:86:94:e4:ac:60:e7:e6:ca:0e:1d:b0:e8:45:1a:
b1:33:76:2b:dc:07:52:66:da:40:68:2b:6a:90:67:
da:4a:13:59:98:e7:06:7f:a5:18:47:f9:1e:dd:0b:
0b:9f:4c:10:94:8c:b7:8c:fd:27:e4:5e:33:aa:40:
b8:96:71:94:82:ac:c8:07:f8:27:6c:e2:ed:3a:c0:
4e:8f:76:42:79:f6:2c:68:c1:b9:61:7f:c4:d4:42:
a0:65:0a:5e:c6:5b:d5:2f:1d:f1:ac:6e:e2:93:fe:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:38:67:8D:95:43:2A:1D:9D:98:59:DE:A0:E3:D1:EA:44:F8:C9:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5239a28-51f2-3c2f-8fb3-4947ab9c0347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.117.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:90:30:a8:5b:4f:0c:88:8d:bc:ce:39:5e:33:49:2c:9b:34:
04:44:2e:3e:08:cb:ca:2b:57:82:74:82:a4:e7:f2:3d:bc:1a:
12:8f:02:50:9d:14:cb:9c:1b:89:6b:a8:8b:b3:0e:5c:3d:28:
b2:bc:af:b2:df:9b:6d:7f:52:2c:92:b6:68:d1:93:76:16:b8:
41:ca:1a:c5:9d:e8:b4:68:de:70:35:76:91:ca:f2:86:fd:a5:
73:8e:9e:bc:17:f4:b3:42:81:12:e4:33:cc:3b:93:24:4c:87:
c7:c9:34:8d:f7:24:51:57:50:c9:da:07:82:61:c5:df:a1:84:
9f:e7:37:3d:47:f1:d9:0f:6c:d4:f0:69:81:22:f3:34:63:da:
d5:8e:37:bb:05:87:40:28:20:14:4e:19:dd:0b:af:1e:a4:79:
10:8c:92:be:f2:69:b9:fb:b8:16:3a:23:94:5a:1c:fa:18:2c:
d6:b3:f6:bf:05:ae:80:df:3e:d7:8b:22:9d:e8:61:47:68:53:
5f:bc:fc:b5:2e:a0:14:fe:b1:d2:b7:5c:fa:8f:d5:4c:fd:d8:
7c:08:f0:3c:28:59:3c:8a:82:20:36:5d:1d:82:e6:21:0b:ee:
f1:5b:df:f0:49:e2:45:0c:39:cd:b1:e2:16:c0:07:44:4c:8f:
33:bc:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:24:06 2025 by rpki-client