Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5f1b193e-1cfb-3871-9a75-44123c9e3006.roa
File: 5f1b193e-1cfb-3871-9a75-44123c9e3006.roa (raw, json)
Hash identifier: vXu5xaB8t1xstAukBq2O7DjSgtkP13yAq67D7qiAZj8=
Subject key identifier: BA:4A:8C:F1:A0:4F:26:13:D1:EB:5B:81:3B:49:BF:B6:87:A0:AF:2F
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858490CB16CCA334470A361B356D0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5f1b193e-1cfb-3871-9a75-44123c9e3006.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 38854
IP address blocks: 98.98.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6c:ca:33:44:70:a3:61:b3:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=85ce8f97-e9ba-41e9-99ac-4de77649ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:a3:4d:b2:87:81:bc:3d:37:32:33:e2:42:
d6:c9:7e:b2:01:f7:08:25:db:1c:ab:25:19:e8:4f:
ba:2d:2c:5c:d2:e0:97:7a:ff:e8:08:a5:1b:2a:1d:
b4:31:4f:12:2f:81:db:e9:37:5a:1e:e4:5a:ce:c1:
f6:0c:0e:ce:3e:c2:05:12:b1:76:82:13:4b:09:7b:
b1:25:dd:97:80:ef:bf:8e:55:dd:d5:e9:f3:c6:14:
9c:a0:d4:78:a8:d1:08:92:fe:78:6f:0e:b7:76:28:
46:95:dc:86:dd:68:dc:c2:63:13:67:e1:c7:3f:7e:
24:f8:e5:e4:20:ef:34:85:54:f8:a0:ce:09:66:ba:
d6:a9:d8:5e:96:ed:14:46:81:cf:5c:92:e9:13:99:
5b:3c:d3:40:75:f8:0e:1a:7f:d8:7b:78:9d:8f:11:
58:60:03:eb:84:b9:9b:c6:96:5d:38:97:f9:4a:01:
5c:75:44:62:f6:8a:6e:bc:28:45:a7:5c:53:3e:6e:
54:c1:cb:78:bd:78:ed:d7:e2:a9:6e:e1:a0:37:b2:
3a:80:52:56:85:b0:29:87:3c:69:2b:dd:f4:74:20:
8f:90:4d:e7:01:0b:7e:ee:6e:df:1b:c4:f3:ee:8e:
41:eb:bf:78:7b:10:f6:b9:cc:6d:fe:02:32:25:9a:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:8C:F1:A0:4F:26:13:D1:EB:5B:81:3B:49:BF:B6:87:A0:AF:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5f1b193e-1cfb-3871-9a75-44123c9e3006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:73:00:51:c6:04:f0:a4:75:05:d3:25:d0:3d:56:b4:f7:b5:
9e:0c:22:0f:25:54:ca:fd:46:7f:8d:bd:50:32:d2:02:5e:67:
69:d2:be:46:1d:ee:6a:38:58:a9:4b:13:e3:c7:b2:ad:55:15:
6f:fc:6e:78:7f:1a:54:6f:ed:80:08:ec:f4:43:11:4e:f1:8f:
ac:12:d5:7d:40:ce:ff:5b:81:46:e8:9c:c3:2c:54:c2:46:33:
e1:e9:3b:75:35:51:42:ae:d6:d8:5a:1f:24:46:05:f0:36:30:
f1:48:d4:85:b1:59:0f:df:71:63:b4:26:46:3e:ed:10:87:53:
a8:52:ef:6a:b1:f1:63:7e:26:17:b0:32:03:88:e8:4d:89:3b:
22:c9:bf:f5:2b:5b:ec:cc:13:ff:2f:f4:fa:dd:36:c4:26:f0:
12:d6:ca:6f:20:14:3a:2d:26:ce:6d:6e:5a:83:b1:c7:fa:a1:
a1:7a:23:e9:97:16:2e:d2:dc:f5:c1:e5:f5:be:f4:89:42:c2:
0c:3d:0f:d8:11:b2:0a:c0:eb:f6:23:88:64:26:70:51:e2:3c:
9d:9a:ef:88:47:5d:70:f5:9c:cf:5f:7d:96:37:e0:ec:d3:99:
03:53:4e:e1:d3:99:59:7d:3a:44:de:26:4b:fc:86:fa:e5:df:
fe:86:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:41 2025 by rpki-client