Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa
File: f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa (raw, json)
Hash identifier: nHAfXUxh7izjVZEVxzlDaZ1A9oek7ylx38N/03cB2gQ=
Subject key identifier: D0:8C:AE:A2:66:6E:53:47:99:BE:3A:EF:61:F3:03:83:BE:85:84:DC
Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial: 010D0C9F43285848159FF3BDD5149C8BF466DB80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 398355
IP address blocks: 144.172.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f3:bd:d5:14:9c:8b:f4:66:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=0a0f43bd-b53b-47b2-8d91-fcedbbb96266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:06:ec:10:75:c4:f2:a2:49:70:21:77:6f:
03:16:7b:cc:70:5c:9f:bf:f8:cc:70:54:c9:21:c0:
b2:9e:99:c4:de:fc:ed:de:cd:59:3c:a8:d3:00:d7:
4c:24:8a:2e:6d:bf:4d:7d:44:55:15:b6:74:82:a3:
a6:91:ad:02:8f:89:83:64:eb:a8:58:d8:bb:c4:69:
6c:bb:83:7c:d2:9d:d0:4d:a0:67:c6:42:2a:5b:98:
96:73:f7:3c:24:5c:f8:a5:74:f4:e2:65:c6:a9:be:
16:74:86:1a:6a:08:0d:ca:ce:fa:d5:7d:f6:2e:ec:
90:5e:2e:79:f7:89:eb:01:d2:ba:8c:59:28:6d:06:
eb:cb:ac:6e:8e:06:fa:15:e2:ad:b8:7d:6e:6b:94:
28:aa:93:fd:a8:61:8c:18:c4:de:99:68:ce:07:ed:
5e:1f:46:db:92:28:66:8b:1d:3e:ad:97:c0:38:fa:
06:33:27:52:bf:a9:8d:24:35:fc:40:5e:bb:b2:a2:
98:ac:bc:42:e7:ab:20:f0:56:c2:ac:4f:0e:66:d8:
79:8e:8d:5f:86:f3:c5:79:0d:73:93:25:c1:37:dd:
d9:cf:69:61:bf:c5:15:ee:09:f5:e6:a1:3c:b1:29:
28:3e:95:56:e4:29:df:ac:bd:73:c4:7e:21:f6:f9:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:AE:A2:66:6E:53:47:99:BE:3A:EF:61:F3:03:83:BE:85:84:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f0947088-c7f3-3aaa-8e2b-c13516a8911c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
X509v3 Authority Key Identifier:
keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
sbgp-ipAddrBlock: critical
IPv4:
144.172.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:bf:44:2a:be:11:94:e2:ae:c0:cb:4c:8a:7b:1f:4b:3f:fb:
79:00:fb:b6:49:51:0a:af:3e:a9:45:8e:fc:a5:68:9c:f5:9a:
18:af:1b:40:83:07:70:7d:7d:38:bb:71:e1:18:18:81:33:02:
72:df:5b:b4:bf:a3:23:6c:56:27:be:74:7a:5f:10:6f:4a:74:
50:29:0c:1c:c9:39:ec:20:62:d5:df:ba:b0:b0:17:c9:e4:88:
04:06:f6:0f:d8:8a:77:12:ff:fe:07:26:6e:b0:55:9f:0c:2d:
36:e9:e2:16:5b:27:d3:0d:ff:07:65:8b:e0:df:27:17:b7:7d:
60:1f:ab:06:a9:9b:27:9e:f2:e1:c9:fb:78:03:75:13:24:86:
ee:31:5c:fe:77:a9:de:83:9f:ff:99:1d:a9:8f:7e:21:04:ff:
3d:ca:f4:d7:03:cf:ac:ae:c9:92:84:ac:77:6d:c9:79:a2:c0:
53:0b:f2:91:c8:a1:32:5f:61:35:ad:73:ca:0c:1c:c4:ca:ab:
63:b6:dc:fc:8a:5a:fb:f5:3b:b7:80:9f:5d:95:67:8c:c6:45:
30:4d:47:33:d5:de:d2:e2:14:2c:bb:79:35:6f:9e:a7:17:92:
b6:66:e6:53:70:bc:ba:a4:92:2c:80:5a:b3:be:dc:48:ba:9a:
dc:48:bc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:46 2025 by rpki-client