Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/fda1197d-28fd-321a-88c0-513108c381a6.roa
File: fda1197d-28fd-321a-88c0-513108c381a6.roa (raw, json)
Hash identifier: Hz4NWN9M1RJQztlf0g5Mjd4R190UW3RHXdI0rKApfWI=
Subject key identifier: 2D:EC:46:AB:2B:8B:D9:35:AA:46:CA:26:3D:D6:55:89:05:27:50:E9
Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial: 010D0C9F43285848960B54E5F82C4AB2A2AC9680
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/fda1197d-28fd-321a-88c0-513108c381a6.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 23465
IP address blocks: 70.98.8.0/21 maxlen: 21
70.98.100.0/23 maxlen: 23
70.98.109.0/24 maxlen: 24
70.98.160.0/24 maxlen: 24
70.98.221.0/24 maxlen: 24
70.98.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:54:e5:f8:2c:4a:b2:a2:ac:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=1799e8a7-8e97-4c28-941d-e732653f534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:1a:8f:4d:ed:c0:d7:91:21:61:23:f2:34:
1f:1d:29:a6:45:a2:77:b7:b0:e7:8e:7d:0c:c7:9b:
71:3b:7f:38:04:a9:d2:61:10:76:19:6b:f7:6b:bd:
74:dd:7f:b7:65:0d:f9:68:70:bb:14:90:35:52:0e:
22:ea:79:e8:8d:d3:4e:84:54:60:20:6d:d1:95:ca:
a1:1c:f5:b7:f6:e6:f1:f2:78:b4:d5:2d:d4:dc:2f:
86:4f:36:d0:ba:c7:00:55:91:9d:41:00:a7:09:8e:
fe:68:f8:9b:af:75:83:28:1b:03:2e:bd:7b:af:d1:
6a:5f:65:11:a7:46:e7:52:b7:fb:20:56:b6:29:ca:
5d:d2:07:b5:78:eb:ee:68:1e:5e:3d:a6:60:27:06:
ce:89:a3:be:41:b6:02:19:25:d7:23:b1:83:10:69:
fa:aa:44:ee:fa:d8:b0:65:48:a7:0c:a3:80:40:28:
96:06:0e:de:45:4a:77:13:90:c2:21:be:9e:75:cc:
bf:f9:6a:49:7b:78:ca:ed:5b:26:7d:5c:53:f5:7c:
3d:5a:1e:41:d9:32:2c:8c:db:41:53:6e:40:c9:03:
08:ae:c5:9e:22:a7:26:bd:91:c3:b2:ae:63:40:bf:
51:9d:5d:46:2e:47:86:c2:e8:7e:5a:1f:12:89:71:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EC:46:AB:2B:8B:D9:35:AA:46:CA:26:3D:D6:55:89:05:27:50:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/fda1197d-28fd-321a-88c0-513108c381a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
X509v3 Authority Key Identifier:
keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
sbgp-ipAddrBlock: critical
IPv4:
70.98.8.0/21
70.98.100.0/23
70.98.109.0/24
70.98.160.0/24
70.98.221.0-70.98.222.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:57:18:e6:f3:74:09:08:00:ad:d9:01:23:cc:64:10:af:19:
4e:0e:fb:13:ad:18:a7:54:1b:74:05:20:49:60:38:48:aa:df:
8d:3a:5f:ca:06:15:ee:e3:f3:5e:35:ae:db:6e:ee:66:4a:c1:
75:63:b9:d8:63:a6:bf:d2:86:b9:a6:f2:66:d5:37:65:75:bc:
e8:9b:24:40:a0:04:88:ef:eb:0c:a3:fa:e6:53:e1:0c:d4:03:
98:f0:cd:47:f6:1d:fb:84:df:89:fe:86:93:26:65:3f:18:45:
d3:95:4d:ba:f4:9c:6d:f3:04:30:ea:21:92:c0:d6:5b:7d:ab:
e8:3d:e8:90:3c:3c:01:85:a0:9e:bc:2c:a5:b1:50:d6:f8:59:
d2:93:51:a2:ac:75:52:8f:b6:39:54:f9:1a:74:ba:57:49:62:
9e:b2:e7:59:e9:dc:ea:2d:73:fc:10:0f:67:61:72:a6:68:0d:
56:e1:c9:21:96:88:d8:e8:9f:80:1b:31:bd:d8:3c:6c:7f:b8:
b1:2d:a3:ca:a4:20:26:04:35:d1:ce:a2:ad:4b:fb:2e:c5:53:
01:ea:a3:92:68:79:9f:b2:f7:cc:2d:fe:75:33:ae:d0:b6:f7:
72:bb:ca:ef:d0:f0:12:67:77:09:f8:0f:e6:e0:4a:c7:79:d0:
7b:d8:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:10:55 2025 by rpki-client