Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/24ffcd2b-4169-3b22-9ebd-7887553a2085.roa
File: 24ffcd2b-4169-3b22-9ebd-7887553a2085.roa (raw, json)
Hash identifier: DYPJ+hNViRKv08WGGQ51Rmav71wbUaYTWGHci5+nesc=
Subject key identifier: 7D:ED:74:27:22:72:6C:6B:2E:2A:BD:97:EA:DB:7D:6C:00:DA:8B:F3
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13F54BEFCC99009354080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/24ffcd2b-4169-3b22-9ebd-7887553a2085.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11426
IP address blocks: 98.122.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:3f:54:be:fc:c9:90:09:35:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f7ddff8a-eb7a-4f66-94f7-d069925dfca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:8b:4e:56:88:4e:ae:36:ae:fb:96:7d:13:
43:72:e2:0a:c0:81:f4:f9:2a:2b:c3:79:fa:c9:ee:
17:b4:0b:3b:76:73:25:0c:5a:cf:36:4f:20:b6:50:
c1:47:72:a1:3f:bf:a4:39:7e:8f:00:52:b2:19:30:
3c:75:75:b3:76:1c:d5:a9:af:56:43:3b:51:bb:e2:
b9:0d:a0:0b:5b:4e:5e:b0:92:dd:72:18:18:ce:b9:
3c:b2:20:dd:cf:77:19:94:18:ce:9d:ec:2a:23:0c:
2d:b5:d1:cd:5a:8b:74:f2:b8:1e:c0:97:25:7f:75:
83:c0:69:cc:7c:9f:9f:a3:df:fd:7b:90:9e:f2:8f:
fd:c8:36:69:11:ba:66:60:28:3f:8b:ab:3e:0c:ae:
8b:3a:3b:01:a0:23:0e:d5:9a:0c:e0:97:c8:46:81:
5c:bf:1f:14:32:12:93:13:23:43:a8:d9:a5:8a:ad:
ef:29:71:51:77:15:ab:8e:ba:46:00:51:32:76:31:
01:ca:f0:b5:53:c9:f0:62:b4:e2:cb:50:37:3e:51:
da:71:60:00:dd:5c:01:c4:a6:e4:50:78:03:ca:79:
06:91:e2:d3:17:63:d3:89:56:2a:b4:02:32:e6:81:
31:1b:cd:11:3b:ac:7c:ee:24:87:f7:61:da:e5:0e:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:74:27:22:72:6C:6B:2E:2A:BD:97:EA:DB:7D:6C:00:DA:8B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/24ffcd2b-4169-3b22-9ebd-7887553a2085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:9d:58:85:51:60:f9:db:af:e8:be:c4:e4:9a:a9:60:b3:fb:
d2:5f:4f:42:c5:5e:27:5f:cc:ae:ca:06:fd:74:00:92:99:dd:
46:41:84:2f:42:70:86:94:af:e1:ba:9f:c2:cf:10:c8:38:fe:
0c:bc:b5:10:41:8a:e9:d9:bb:4b:a4:3a:e8:b8:aa:90:fa:a5:
ec:ad:2a:f7:a6:8a:72:bf:63:f8:d4:43:a5:56:b4:34:b0:94:
bc:fa:3b:79:97:ff:27:50:06:fb:6f:82:e3:ac:a2:2f:ef:e3:
e2:a0:1b:ce:f0:71:ef:f1:73:9c:4c:9a:79:f8:24:97:ba:14:
ba:b6:2c:35:b9:93:68:a7:d5:c3:fb:47:8e:f7:80:2b:66:20:
8c:69:13:64:52:28:52:ae:dc:21:ef:19:e6:cd:b7:02:6d:de:
9c:53:55:9a:58:ab:a1:53:7b:61:4b:aa:e6:fe:1c:d6:40:cf:
8d:ff:61:b6:4d:9a:04:f2:35:bd:ce:98:16:2a:82:41:1d:8f:
c9:5d:85:3c:11:50:d2:51:b9:59:86:2d:c2:2e:ba:d4:6f:13:
34:b9:b3:57:9e:26:40:94:f3:20:e6:88:f3:fc:82:85:e7:ba:
61:30:68:f9:b4:17:38:58:61:d7:e0:4f:12:09:2c:8c:60:1c:
c2:93:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:32 2025 by rpki-client