Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
File: 23d78f72-cae4-3827-920f-85c38c632f71.roa (raw, json)
Hash identifier: ICEP1k1sBcrnwErhwVMavkijhHR/ZN0AIfsw2z79p5k=
Subject key identifier: 8E:D6:45:9F:FF:5B:15:64:DF:0E:71:A4:26:7F:0E:3C:F5:1D:B8:25
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858489BA0B38BE78CB44F5366F8C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 21859
IP address blocks: 98.98.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b3:8b:e7:8c:b4:4f:53:66:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=e10e2b0e-9ee0-4e2c-a453-edaba2475a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:95:f4:99:e6:10:88:30:2a:c4:c8:3b:8d:
27:b7:0b:00:a2:83:f7:90:a9:60:48:98:7c:3b:f9:
7d:89:61:2e:43:72:d7:a4:7f:58:4a:68:c4:dc:26:
73:8f:18:fa:0f:59:9b:06:e1:3a:ba:f6:fb:23:23:
a6:ca:33:c7:0b:5b:ad:2b:4c:70:8c:8c:24:c3:79:
62:e1:dc:98:d1:40:23:e5:2f:9f:70:23:13:f3:10:
ab:83:45:1a:15:85:3f:1f:96:38:5d:ee:9d:5e:96:
46:8a:3f:88:7e:ab:60:a4:54:b1:9e:10:d8:db:c6:
29:76:c3:ec:f7:05:0e:e9:4a:1e:41:d1:d4:f3:04:
51:53:0f:11:06:c8:79:7b:10:56:47:a0:e5:7d:e2:
4c:c3:f6:fd:ee:24:bc:da:d4:82:4c:15:29:7c:ec:
23:59:23:0f:a4:9b:6b:38:ee:cd:58:21:1c:d2:c2:
03:08:6f:56:f7:26:fd:00:47:60:3d:81:af:3d:dc:
ca:f0:12:63:33:a7:69:9e:95:77:bc:22:35:5d:f7:
c7:e6:62:16:1d:4b:b0:9f:2b:b0:3b:cd:d7:3d:8c:
ad:14:b6:b8:a3:60:07:59:19:8b:b3:21:6e:ee:18:
5e:a9:72:6c:ec:a2:db:77:9e:e2:1b:84:98:b1:a1:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:45:9F:FF:5B:15:64:DF:0E:71:A4:26:7F:0E:3C:F5:1D:B8:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:2d:8a:7f:3e:c6:7c:af:d9:75:82:7c:2f:3a:92:0e:cc:cc:
b1:28:59:aa:e1:a1:60:81:6a:57:90:12:f4:38:b8:73:94:30:
bf:7c:70:6d:9e:47:1d:cd:eb:28:fd:0d:68:08:1c:7c:86:f9:
f4:66:06:0f:0e:93:b6:84:e0:ee:c2:1b:5a:ab:7d:6f:22:26:
bc:3a:25:ee:3b:57:e0:3d:32:ba:4d:bc:88:be:39:b5:40:d4:
cb:1a:22:05:66:b2:51:6c:f6:5f:6b:e5:4f:61:6a:77:75:5b:
cf:47:f0:20:8d:34:6b:5b:83:ed:4f:51:56:d8:0f:2f:e8:5e:
28:40:13:c1:3c:d5:05:95:65:65:44:bd:bf:da:b1:ff:98:3a:
b0:6e:3b:57:1d:31:a2:8e:d0:ca:24:bd:a7:11:26:47:66:25:
c7:ad:1f:ff:d8:59:32:56:2e:b5:dc:a1:e6:22:7a:04:c5:c2:
0a:3f:57:80:d4:6f:2a:df:98:2a:5d:69:f8:73:9f:4a:d8:4e:
87:00:e5:b7:f1:ef:61:c3:d5:87:d4:c0:0d:32:94:34:19:df:
d7:93:b4:36:f6:be:e6:94:7b:f2:c8:dd:1d:4d:ee:9b:7b:3a:
c5:b9:f7:2d:06:c6:fd:3c:03:bf:78:8a:03:43:a1:0e:24:b3:
a8:36:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:07 2025 by rpki-client