Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa
File: b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa (raw, json)
Hash identifier: n4rfAIwfOihS+dxOuLuYowRGijARBtzllUGy5OtHaBc=
Subject key identifier: 93:29:B1:D5:43:F7:E5:57:9C:42:CD:0F:1A:B7:B7:B4:19:0F:83:24
Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial: 010D0C9F43285848897B1FDF8CBFBECEA6CFDF00
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 400619
IP address blocks: 172.98.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1f:df:8c:bf:be:ce:a6:cf:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=a552ccd0-eb88-49df-a8b3-9a441194dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:a2:32:76:fc:50:bb:36:79:5a:98:66:ac:
ec:32:23:7f:b7:65:96:b8:a8:de:4a:85:25:08:5e:
0e:02:9b:9e:bf:6d:38:f3:5a:23:ff:1c:97:34:45:
b8:0d:87:56:7f:33:80:66:07:b7:bf:19:ce:7a:15:
82:40:f1:6d:fa:0a:bf:51:42:b3:d3:7a:55:9f:ef:
dd:58:0b:97:b6:d2:84:6c:bf:33:6a:1f:ed:27:5f:
62:a9:bf:1c:4b:20:57:df:0b:6b:11:9f:4c:07:19:
4a:36:7d:20:8f:04:20:a2:d2:04:c9:03:5e:c6:7f:
cd:dc:f5:29:4e:bb:17:ff:9a:b6:d9:dc:38:62:74:
1e:4e:fb:5f:1a:8d:3c:cf:a7:d1:21:7e:cb:86:02:
a5:04:b3:2f:38:ce:1f:34:90:05:b5:85:9d:7f:f6:
41:83:50:a4:92:39:e3:2f:28:54:18:25:ec:aa:7d:
4b:0b:cf:e6:d6:e0:b7:06:e7:19:2d:32:a6:c0:80:
7b:8d:fb:a3:4c:15:af:4d:bf:9a:a0:30:fb:98:80:
07:cb:73:8e:1e:2c:b2:2d:c7:0d:7d:ff:86:58:50:
e8:0a:da:a5:69:c7:9b:e3:c8:f2:33:1a:a7:e6:1b:
5d:86:19:c1:50:49:9a:67:8d:4c:d1:20:e2:af:97:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:B1:D5:43:F7:E5:57:9C:42:CD:0F:1A:B7:B7:B4:19:0F:83:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
X509v3 Authority Key Identifier:
keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:1b:82:10:b4:2f:f2:81:62:0a:6c:a6:ea:e9:39:01:54:1e:
f1:53:1a:8e:f4:bf:f6:26:f0:33:8f:26:36:59:2f:e6:dc:e5:
2f:09:42:db:8e:db:b5:72:ae:2c:70:39:ab:92:38:3c:0e:b1:
21:59:f1:28:bb:97:98:b9:f7:05:71:4b:ac:d5:51:84:64:f8:
94:64:dd:06:9b:9f:7a:70:93:74:1c:c5:93:6d:54:14:69:3f:
ce:84:42:1e:82:b3:19:78:9a:db:e4:f8:63:07:e5:9a:4c:61:
e3:a7:be:59:19:21:e1:be:9b:79:42:9a:b2:65:5e:7e:81:9d:
03:73:24:64:f7:c4:9d:da:7d:f8:d0:5c:b6:dc:a7:0a:75:97:
f5:c3:34:a8:4d:67:92:ee:3d:ed:a4:00:e3:c7:5e:d9:43:cf:
88:ed:ec:28:f6:98:cc:75:92:1a:9b:df:5d:94:75:2b:5d:ab:
33:f8:f9:59:22:19:db:89:8b:b1:1d:85:40:cc:10:de:5e:b2:
44:4e:86:79:51:01:da:78:2b:62:69:4a:a8:f5:85:e7:cf:a1:
79:63:78:40:57:9f:fd:22:9b:2e:54:45:ce:75:d9:c4:d7:e5:
7a:c8:85:70:40:03:61:64:e4:ae:89:27:17:c7:dc:36:85:43:
37:0a:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:14 2025 by rpki-client