Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/2f3d635a-300b-3a2c-a013-0852d23ced2d.roa
File: 2f3d635a-300b-3a2c-a013-0852d23ced2d.roa (raw, json)
Hash identifier: vB0LRRRqSVxoVFmmA8m3VG2JgGth5OH6M2XK3iK14fk=
Subject key identifier: 68:C8:CB:53:63:EF:9A:AF:2E:9F:58:4F:F8:0D:70:51:EF:36:00:0C
Certificate issuer: /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial: 010D0C9F43285848FE88016A3E755047EC050980
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/2f3d635a-300b-3a2c-a013-0852d23ced2d.roa
Signing time: Tue 25 Feb 2025 00:16:15 +0000
ROA not before: Tue 25 Feb 2025 00:16:15 +0000
ROA not after: Sun 25 May 2025 23:16:15 +0000
asID: 46261
IP address blocks: 172.98.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fe:88:01:6a:3e:75:50:47:ec:05:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Validity
Not Before: Feb 25 00:16:15 2025 GMT
Not After : May 25 23:16:15 2025 GMT
Subject: CN=bc946218-94bc-4a94-b9f4-188601a980ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:10:7d:67:91:6b:42:ba:2e:88:fd:b1:31:
1b:4b:9c:e2:9e:55:65:92:10:71:f6:55:b7:35:f8:
bb:80:42:75:a0:a5:96:b5:f4:61:94:99:83:9d:d6:
ca:b8:f6:68:8c:76:7c:2d:60:20:28:3f:ae:c7:1b:
8a:9b:d9:3a:a6:d8:8b:61:c9:46:3c:1d:71:17:89:
8d:03:ba:ce:c5:fc:f4:38:45:de:b9:ef:71:c8:31:
72:1a:74:3a:f6:67:03:6a:9f:de:1e:3e:02:ef:4c:
c4:21:a3:4a:e1:83:e1:eb:bf:a8:fc:be:b8:f0:20:
8c:e9:f5:44:d3:25:e1:ad:a3:9a:4d:7c:99:5e:4a:
8f:3c:1a:8d:14:95:f4:d8:2e:19:cf:5d:a2:54:29:
83:6c:41:2b:37:46:02:e6:35:14:5e:cf:f8:74:c7:
6c:3a:f4:eb:89:15:a3:27:0f:d6:ed:f5:6f:15:04:
37:b3:70:98:7e:eb:33:c5:a1:20:e6:1b:2a:6b:e5:
0e:7a:36:65:c5:59:cf:bd:75:bd:16:ca:1c:fc:fc:
23:a3:fa:01:b8:d6:5d:e9:ae:4d:36:9a:57:99:f8:
b7:a2:b5:0f:44:58:87:5e:c7:21:3a:bd:81:0d:b4:
9b:78:75:82:e8:34:09:04:03:62:39:7c:70:c6:e3:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:CB:53:63:EF:9A:AF:2E:9F:58:4F:F8:0D:70:51:EF:36:00:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/2f3d635a-300b-3a2c-a013-0852d23ced2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
X509v3 Authority Key Identifier:
keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ba:e6:13:75:17:19:a3:30:c9:52:48:3a:b8:0a:8c:3c:07:
22:75:4d:87:ca:d6:af:f9:84:ac:aa:7e:fd:9d:44:a3:e0:3b:
83:27:bf:50:8f:69:a5:8a:1c:7a:18:57:f1:53:6e:17:82:75:
06:c0:2f:46:3b:be:2f:b9:28:ea:86:28:01:58:2b:4f:ea:f5:
f4:a7:38:18:41:51:58:8a:52:98:dc:57:c3:da:3a:73:14:d8:
5f:ab:cc:3d:e8:f0:4c:8d:49:4e:5b:f2:a7:8b:ed:2d:38:fe:
9d:1c:f8:64:e4:4c:21:60:74:9a:6d:da:c4:90:1c:fd:5c:b8:
44:72:60:6c:7f:ba:ca:9f:34:9c:c5:df:1f:8a:6f:0e:5b:c6:
36:3e:92:7c:db:47:d7:b0:93:fc:a6:3c:e4:3e:b0:29:29:b2:
e7:03:37:74:db:8c:a5:44:12:b4:9b:c4:81:4d:04:38:74:1a:
98:4a:37:7d:bf:42:63:57:12:62:7a:0f:fc:64:fe:05:6c:7a:
84:9a:d5:4e:dc:41:8e:f7:06:94:65:64:f1:dc:a9:2a:bf:0a:
b6:b0:06:ee:e6:cd:cc:1d:05:43:57:fa:c5:00:0b:4b:af:ab:
c5:fa:53:c4:2d:ff:fd:23:94:29:c5:5f:8a:ba:4a:12:5e:f0:
2a:2c:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:57 2025 by rpki-client