Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/73be3056-62b6-3e4c-ab1f-e3d0bdacb0b7.roa
File: 73be3056-62b6-3e4c-ab1f-e3d0bdacb0b7.roa (raw, json)
Hash identifier: fX8/YGQ1ftr+xHBzQ3YMBu5VrNEnSnQIZkkAsQRJ840=
Subject key identifier: 04:D2:AD:10:8F:4F:F6:77:F0:C1:90:9A:E3:8F:A5:90:D6:EB:F9:FD
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CDE8F14D5C1729306000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/73be3056-62b6-3e4c-ab1f-e3d0bdacb0b7.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 19115
IP address blocks: 98.8.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cd:e8:f1:4d:5c:17:29:30:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=570b06b1-8cef-4bcd-b847-b37fc99df84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:18:a1:89:46:63:e7:7f:1f:bb:bc:df:69:
80:8d:d6:8e:9f:33:b7:ac:b2:00:82:1e:65:4b:e4:
d4:d3:24:a8:0c:e2:1f:46:dd:18:f4:b6:ef:b0:60:
27:ff:55:66:a5:b7:9c:c2:42:e7:cb:94:91:4c:f7:
9e:5b:96:8f:b5:7d:f4:f0:de:84:9e:50:40:1c:6d:
9c:f7:df:ac:0f:b6:07:38:17:b6:d6:05:ba:14:d1:
66:ed:78:20:18:7c:bf:8a:26:9c:53:41:34:4a:16:
6f:27:5d:78:84:b0:97:26:1c:84:41:50:c2:24:36:
0b:68:fb:8a:c7:a2:80:8f:0f:03:c0:d1:65:80:ca:
da:13:ee:6b:d4:9e:11:53:93:84:0b:b1:5f:33:82:
25:92:d3:d2:85:c3:da:9a:30:ad:63:72:86:1a:2c:
16:98:4b:2b:2f:9e:8b:ef:94:6a:f3:3a:e1:11:0a:
51:e3:a8:85:a7:fb:65:ae:a6:e1:8c:81:be:ec:45:
d4:9f:c2:77:eb:7f:55:74:5d:31:9c:e4:2b:eb:9d:
22:1d:b1:4b:46:83:1f:35:2a:83:36:5a:23:aa:58:
cc:9f:38:b1:ae:32:02:09:e8:4b:b6:3f:87:bf:30:
55:25:99:33:92:94:aa:1c:cc:d8:71:fe:4f:bb:ad:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:AD:10:8F:4F:F6:77:F0:C1:90:9A:E3:8F:A5:90:D6:EB:F9:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/73be3056-62b6-3e4c-ab1f-e3d0bdacb0b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.8.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:e7:30:24:20:6c:79:72:f1:75:96:7f:2a:cf:4f:9f:3f:22:
59:2c:13:c9:da:c4:1a:b9:a2:82:f4:23:9c:cd:43:e1:22:f6:
11:13:f7:59:04:e7:8b:92:7d:ef:16:5a:6d:1d:4f:b4:d3:fd:
44:91:ed:51:9c:aa:1b:61:2f:33:30:53:28:8c:42:f6:f5:d0:
eb:8e:dc:34:ad:51:70:ab:5f:a5:fb:c4:b8:f9:e9:8c:b8:34:
4d:79:51:e9:f1:3a:f8:44:bf:91:ca:28:a9:44:b2:70:4c:66:
27:2e:74:de:40:d2:b2:33:39:54:87:cc:fc:cd:24:6f:d1:57:
6d:cf:b7:95:9e:04:45:cb:af:c6:3d:f1:73:2e:ab:42:d8:75:
48:a0:4a:32:c2:53:b7:78:77:c3:77:c2:ee:d1:8b:72:9a:f6:
ab:52:4c:29:09:1a:46:b7:f8:dc:f5:a7:9e:03:f3:4d:7e:53:
a6:55:5d:d5:0d:b9:45:1d:4f:85:5a:46:54:f3:75:4e:f5:0b:
a0:7c:bd:e9:5c:b9:d2:36:0d:a6:ce:7e:1c:d0:fa:19:af:3e:
01:77:e7:d7:9f:41:21:73:2f:c5:19:8f:2a:ef:ed:31:ef:5e:
dd:e6:1d:2a:28:a8:ec:e3:ab:06:2c:8c:89:fb:fb:3c:71:85:
93:ee:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:04 2025 by rpki-client