Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa
File: 289678b3-f21f-3e98-9287-47183cecd522.roa (raw, json)
Hash identifier: zl7xXh2VeOQrsI3njdQEgYMHWBeSaYoFvGBoXw9Qr3g=
Subject key identifier: E0:A1:1A:63:4C:07:10:DB:04:1E:CA:1C:59:91:C5:E0:E9:08:CB:8A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CF0590BE3EC4C3A06E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 98.148.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cf:05:90:be:3e:c4:c3:a0:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=07f8b54a-465a-44c0-b199-f2fddf1978b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:77:d7:77:c9:f7:a4:c9:99:e6:27:1e:31:
19:06:eb:20:31:b4:13:07:6a:db:11:e7:73:fb:9c:
f6:79:2c:2b:29:44:95:01:ca:be:91:8a:a9:02:2a:
de:f4:77:27:fc:2d:ca:9b:fa:18:5a:dd:99:11:bb:
2d:6d:cd:a0:c1:78:b8:91:3f:2f:29:96:09:45:23:
dd:d3:ed:02:7a:f0:92:09:4a:6f:f3:7d:ce:a0:a4:
da:e3:07:f1:5d:79:49:a8:f6:e4:cd:ce:f2:23:b4:
7d:b4:7e:36:e4:5f:b0:90:5d:ce:68:15:e3:9b:19:
71:b6:18:a7:b3:2f:7e:f2:ac:80:eb:a5:50:42:2b:
14:3e:c6:c8:e7:f4:4a:83:04:1e:04:61:ba:f5:9a:
84:7f:be:6a:9b:df:60:cf:de:3f:7d:1d:f7:dd:f0:
8b:91:64:30:7f:45:44:1c:ee:ef:be:83:ed:d3:e2:
81:12:68:7a:13:b1:00:5b:99:c8:79:8e:9d:43:9e:
dc:19:e3:41:4c:e0:77:18:94:dd:2a:f2:06:e5:2e:
64:58:f8:81:8c:7e:f4:18:b5:74:35:0b:14:f7:06:
d9:d0:c2:e1:cb:f3:5c:c9:92:80:76:70:fe:ba:32:
ca:99:45:e2:34:25:08:79:d9:ce:b3:46:0f:89:ac:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:1A:63:4C:07:10:DB:04:1E:CA:1C:59:91:C5:E0:E9:08:CB:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.148.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:c6:68:bb:31:90:9f:66:70:1e:ec:74:09:6f:de:2c:c3:5b:
7d:22:ef:d6:77:49:6b:6f:c8:94:d0:f6:92:9e:ee:df:07:68:
dd:59:e2:5d:e0:9f:03:9b:49:20:cc:f2:c4:68:8f:66:f2:cc:
f9:63:92:14:00:72:df:d8:ea:d7:4f:4d:0d:46:a2:58:29:84:
54:26:57:8b:19:5e:68:9b:3c:be:d0:d6:9c:b3:dc:7e:9a:16:
cb:e9:b5:45:64:03:a6:f9:f0:87:55:9d:8b:04:6c:29:19:c0:
88:22:a7:23:88:cf:87:c9:e2:23:7f:82:1a:e3:08:64:0f:41:
0a:31:4a:e4:26:64:22:04:da:ad:92:90:b3:8b:a6:f4:f2:2d:
95:3b:56:ec:53:a9:66:b2:e6:e8:e4:12:61:6a:3a:76:bc:c6:
35:77:67:cf:a2:7a:43:60:3b:0d:a9:d3:6a:88:e2:72:82:ce:
a4:86:5f:a7:1f:6b:2a:8e:27:d7:95:d5:7e:2c:b3:28:83:36:
c3:d4:8a:21:80:53:5e:86:10:43:b3:dd:3c:6d:94:fe:69:2e:
33:c6:02:d7:5b:ef:f5:96:56:f4:30:b8:4b:28:98:50:85:79:
ea:7e:e4:90:2d:ad:ec:e7:77:ed:91:82:c6:82:64:08:5a:87:
e0:5b:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:58:14 2025 by rpki-client