Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa
File: 2d0e13e5-4120-3298-b17e-67e7af5580bd.roa (raw, json)
Hash identifier: ltkAn5vJypmhtpBYqFAvWSvbKkVHcXBscQbfuj3UtKk=
Subject key identifier: BF:03:A0:C5:BD:BD:07:99:26:2E:38:DF:51:F4:D7:24:EA:58:9C:0E
Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial: 010D0C9F4328584902EC2C1721677C4607176300
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 399728
IP address blocks: 172.98.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2c:17:21:67:7c:46:07:17:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=bad8e5c3-9784-450d-b845-cdf73d355de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:84:0e:c5:2c:a7:2e:68:34:85:b7:a1:b5:
a0:56:e2:16:39:6f:df:59:b9:68:23:0f:ae:fb:83:
8a:03:8c:0b:01:b4:f4:17:2b:34:00:55:4b:b5:57:
66:31:1f:81:e5:d7:6b:97:64:c4:2a:af:97:ef:c2:
9c:b9:5d:e6:5a:10:b6:9d:b7:80:c1:3a:f6:07:c3:
9d:07:5d:63:21:47:ca:f1:1b:1a:7f:d4:c5:c4:58:
f0:f3:c1:9a:c4:77:4b:1e:9e:c1:e2:96:ff:14:ec:
6a:53:fd:55:b6:0b:19:c4:e9:6c:05:d0:80:97:eb:
6a:ec:3f:8a:2e:ea:eb:10:4f:b3:da:f1:db:41:53:
df:d8:c7:6a:e0:2f:de:32:b4:ff:e2:74:a1:b3:47:
02:52:b3:2f:c8:1e:2e:b9:e8:57:42:b1:6e:ae:ac:
1c:f3:d7:fc:a6:1e:ce:3d:0d:7d:84:e0:f9:b1:23:
e3:d6:9c:d3:09:34:5e:bc:b1:e3:66:95:c4:ac:8f:
f8:bf:c1:c2:db:a6:08:86:8f:2a:53:3e:4d:04:3c:
95:e8:88:70:51:6f:6d:20:da:d5:19:fe:a8:77:84:
36:ca:28:b7:4d:3c:ae:59:9f:0b:75:13:ae:86:a8:
2f:82:20:79:ac:8e:11:86:3a:84:1c:3d:c9:68:78:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:A0:C5:BD:BD:07:99:26:2E:38:DF:51:F4:D7:24:EA:58:9C:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
X509v3 Authority Key Identifier:
keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:41:b7:38:ee:05:fd:4d:89:22:37:e4:37:04:95:60:8e:e0:
ac:b2:74:07:45:73:a9:9c:3e:c0:f8:0e:2c:a1:82:1d:b9:4d:
f6:f4:94:8d:70:37:f0:51:dc:ce:30:76:2c:2e:9f:a2:ea:ff:
d2:95:cf:74:2f:8a:51:11:4f:11:aa:1e:5e:84:74:6e:1e:84:
bf:3c:cf:62:7e:88:39:72:e9:47:f5:f2:dc:78:b5:77:49:ff:
cc:96:0c:ce:fa:ea:90:eb:68:77:65:86:65:a2:7d:03:a9:0e:
3f:2a:24:0a:9b:3c:87:c1:db:a1:c6:e3:31:d1:e3:0d:03:a0:
0d:0a:8e:5f:5b:d3:23:c2:8f:36:92:c1:64:e1:b6:fc:c2:9f:
0c:5e:42:79:df:98:bb:23:57:35:1b:f6:4a:8f:db:17:bd:01:
62:4e:53:e0:0c:37:1c:ad:a2:a3:f1:8c:53:c7:a9:ff:6e:15:
05:b3:33:9f:c1:50:0a:93:7c:7e:f8:35:7b:a0:c1:a1:b0:1e:
f9:dc:57:20:bd:25:d2:bf:d9:52:9e:b4:80:54:1a:bc:42:50:
9f:29:da:19:94:d2:a2:10:b7:b7:84:41:52:1f:84:dd:17:b8:
5c:89:36:79:e7:ad:69:92:e8:8d:eb:19:4e:f6:9d:2e:ea:03:
3d:19:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:18 2025 by rpki-client