Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa
File: 0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa (raw, json)
Hash identifier: 0+2uBEskCiGy5NGxcSHm2TSsC95KPOED5RaHoYfnJSY=
Subject key identifier: EA:B8:19:6C:39:81:21:AF:68:27:BB:CC:F2:3B:17:A1:31:44:C3:9B
Certificate issuer: /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial: 010D0C9F43285848530AEED153AE9D0E5D1871C0
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 8100
IP address blocks: 172.98.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ee:d1:53:ae:9d:0e:5d:18:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=9e75f124-51fa-43fa-b4e1-4fea1159a2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:af:d1:57:f2:ca:85:a0:a7:13:9f:9a:2c:
cf:b2:e3:32:d3:e3:c9:dd:f3:22:fc:bf:68:bf:a4:
91:a1:7c:f8:a1:70:3d:6e:d2:d9:3e:60:14:cd:32:
b5:d5:fa:cd:d4:5a:33:f4:38:d7:87:dd:55:30:6f:
82:3d:50:31:15:41:0d:67:aa:6d:63:2c:74:ed:17:
47:ad:b7:1d:55:c2:89:89:a3:08:e4:8c:f6:58:d4:
00:47:3d:c1:e6:2e:47:a1:a8:21:21:a7:6f:18:42:
1e:32:ad:41:ae:68:ad:2d:4b:69:b6:ba:e7:ad:6a:
72:1e:f8:e0:19:51:d7:2e:88:a7:32:35:1c:81:73:
b6:32:53:9c:80:5f:41:04:f0:ad:6e:ff:36:d6:b7:
38:72:76:6a:b5:df:fd:da:0c:10:c8:94:09:09:82:
5c:c0:e3:5a:3b:30:cd:2d:3d:20:6a:83:d8:33:24:
96:36:6a:9b:23:38:31:cc:c8:23:24:c8:ba:d7:99:
7d:48:02:e6:79:a6:c8:33:69:0a:ec:e8:12:16:95:
ae:62:1e:1a:5a:ee:b6:e1:c9:7a:2f:af:ea:a4:96:
84:25:53:fd:48:2d:dd:81:db:94:e1:6e:23:d9:55:
0f:7c:c7:db:51:a8:de:b6:70:72:08:4c:de:45:f4:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:19:6C:39:81:21:AF:68:27:BB:CC:F2:3B:17:A1:31:44:C3:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
X509v3 Authority Key Identifier:
keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:29:96:08:39:8d:ae:23:52:23:e6:79:ce:27:c1:4c:98:d4:
ad:95:d1:94:8a:3d:44:4d:b2:1c:5a:72:d0:69:32:67:dd:10:
a3:db:a0:d6:06:82:28:5d:4f:b4:53:b2:5b:70:80:40:1b:e9:
65:8a:ea:04:21:2f:22:f0:a7:65:d5:0e:85:f6:49:e5:96:34:
26:d2:74:0c:05:81:33:c7:d6:d8:f5:4a:ac:34:53:1e:00:bf:
fc:5f:d9:ce:09:7f:12:04:e3:8c:65:e4:5f:76:3e:5e:02:bb:
f6:2a:a9:6b:f9:1e:77:16:fa:b2:8e:31:cd:f1:73:73:06:c9:
f4:68:c2:79:29:53:cc:11:00:44:3a:b6:12:fb:1c:dc:23:a3:
0c:dd:5b:b5:fa:69:e2:13:d5:d2:bf:c3:fa:81:bc:a0:f0:93:
55:1b:b8:35:96:01:66:6f:60:a0:8e:71:a9:60:ca:e9:16:18:
00:be:3c:e3:ee:6c:c3:f1:38:d8:d3:fe:9e:ad:46:6b:71:f3:
3d:6b:c4:1d:c7:90:f6:1e:96:25:5a:d5:4c:e5:00:93:e5:dd:
4c:6d:83:a6:15:2b:e9:dd:f6:b7:b3:35:bd:73:3c:d1:e4:86:
a9:5b:20:fb:d2:6f:4d:7f:1d:5f:5d:a5:92:8b:4e:a0:4b:bb:
92:86:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:49 2025 by rpki-client