Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/9dc854fe-62b7-32cb-9ce5-d4e4a49db066.roa
File: 9dc854fe-62b7-32cb-9ce5-d4e4a49db066.roa (raw, json)
Hash identifier: JgV6Ao1oEQLHPCY4blUi3qF5qlNJWjsd6H+HDkCwBxg=
Subject key identifier: 4D:21:96:2B:61:A5:AA:5B:B6:80:AE:30:6B:18:9B:2C:D1:D4:06:15
Certificate issuer: /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial: 010D0C9F43285848530AEEC083618E2CCD786DE0
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/9dc854fe-62b7-32cb-9ce5-d4e4a49db066.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 8100
IP address blocks: 172.98.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ee:c0:83:61:8e:2c:cd:78:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=efe65628-c2d4-4768-ba2b-60d249905121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:6b:f8:d2:60:5c:71:99:bc:9a:a8:1d:56:
7e:0c:02:24:a0:24:94:98:3e:13:d2:5e:a1:7c:be:
59:06:24:98:f2:eb:47:55:e9:55:09:f7:bd:99:a9:
20:0c:40:e8:24:6c:51:d7:54:ad:2c:3e:44:64:81:
81:c4:bf:a7:49:b7:7d:fc:3f:17:12:82:ec:dd:05:
d2:ac:ea:58:21:9a:99:eb:a3:5c:f0:a2:62:60:10:
d1:3e:19:88:d0:be:aa:88:9a:68:78:2f:72:bf:35:
d1:1f:10:6e:d8:f6:06:52:75:39:4c:14:29:f4:0e:
52:59:9d:9f:c0:66:a2:51:13:49:f1:1f:ae:d7:f9:
4f:e4:ac:9b:e9:dd:3d:dd:67:0e:2e:08:50:be:ab:
15:de:4b:4f:bf:01:42:da:60:2e:35:fc:81:74:04:
0b:00:5d:e1:5a:d7:a0:2f:c7:09:4a:5f:b8:d1:e4:
93:6e:40:db:cc:7b:db:7b:04:c5:b2:5c:a8:6c:26:
1d:b7:a1:5a:5b:55:0c:62:5f:63:6b:a8:d1:e4:42:
84:dc:11:f9:bd:26:2a:bf:35:c0:3d:34:b8:a8:ca:
ec:e3:78:ef:58:e9:37:cc:7d:7c:ae:b6:bb:18:1b:
4f:a1:2c:78:e4:bf:03:90:0c:d5:15:5d:20:f4:96:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:96:2B:61:A5:AA:5B:B6:80:AE:30:6B:18:9B:2C:D1:D4:06:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/9dc854fe-62b7-32cb-9ce5-d4e4a49db066.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
X509v3 Authority Key Identifier:
keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:f0:c3:b2:1e:66:d0:a5:69:b2:72:7f:3b:04:00:f3:c7:2d:
4d:c0:7d:4b:ae:7d:59:da:da:66:61:69:f6:91:18:80:f4:9f:
6b:17:e7:ff:fe:da:9b:d0:f3:9e:d4:b3:62:6a:5e:cd:7f:bb:
1b:93:2d:cb:4a:05:de:b3:b3:4b:fe:fe:95:a7:95:30:cc:38:
8a:70:ca:0b:44:8a:24:69:5b:77:be:65:09:fa:84:da:31:f1:
c0:89:f4:fa:8d:76:c0:d5:52:c0:c4:80:71:d0:d5:c5:04:bc:
12:8f:f1:6a:a9:c9:9e:8d:bd:7b:1c:cf:4e:fd:27:b7:5f:a9:
7e:72:ae:f8:1a:34:10:bc:a4:7c:81:2a:bd:6b:aa:6b:0a:2b:
cc:f0:0b:58:01:da:75:46:4b:3c:30:75:58:f1:a7:6f:fe:c0:
41:01:b6:da:0c:a8:5e:07:5f:92:41:9e:a8:32:43:ca:00:2f:
33:eb:19:2b:0f:ae:0c:b5:26:d5:0f:94:b8:1d:c3:61:b3:91:
b3:6f:d9:ad:79:4d:43:6b:c4:bc:f6:ae:4c:80:12:44:dc:a5:
ee:94:7f:6e:a0:ff:6e:37:91:99:0b:d7:3d:4f:08:9d:fc:79:
be:71:07:ee:bb:6b:61:fd:36:00:cd:e3:3c:a6:1f:ce:b3:be:
37:0c:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:18 2025 by rpki-client