Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa
File: 7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa (raw, json)
Hash identifier: Iuo7eIgyxF8A961bRFV4Y9BOFUphCvu2tchHAzhTl3o=
Subject key identifier: 54:1D:13:F5:0A:1B:3F:A1:B8:0D:19:6E:3A:94:43:1A:AE:F8:F9:3A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584902EC2F421F8AE5A7A47E4800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 20115
IP address blocks: 98.8.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2f:42:1f:8a:e5:a7:a4:7e:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=fd2d7ea6-6ed6-4e6d-8300-8675cbfda118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:49:64:c4:66:b7:29:57:9b:64:41:6f:65:
3d:1a:49:0e:e3:d7:83:b2:16:2f:33:aa:43:8c:96:
27:fb:39:75:32:36:19:a7:0c:12:7c:02:80:ae:02:
47:34:95:3f:98:ea:d4:07:ea:7e:5c:41:d1:b1:bb:
c1:b8:46:44:c8:f8:bc:81:6b:d5:52:bb:3c:cf:d5:
91:68:30:de:b7:c0:1f:cb:5b:c5:6a:29:c9:fc:b7:
23:4e:ac:cb:c5:22:a6:ac:fb:b7:85:31:d4:be:49:
a7:19:81:a0:13:59:a6:4a:1e:52:d1:50:f1:ea:84:
6b:12:1e:1e:e5:eb:a7:e4:07:44:af:eb:96:86:1a:
8c:1e:b0:eb:c7:7f:4f:ea:2a:37:54:2a:57:80:46:
ea:5e:04:b1:26:a5:de:f5:cf:b9:55:39:c2:99:23:
71:d2:69:33:0c:bf:64:7d:54:ef:68:f8:95:3c:6a:
88:16:15:3e:63:84:21:0b:99:3e:ac:a1:a7:73:0e:
dd:23:dc:03:d4:02:46:ce:c1:95:b8:a1:76:b7:ec:
51:54:b3:1c:05:9f:2b:52:f0:7f:2b:75:23:9f:7a:
7c:75:d3:64:23:3f:c4:81:51:34:e5:16:05:42:a2:
73:45:52:dc:5d:22:2a:61:7b:5f:b8:09:e7:4a:22:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:13:F5:0A:1B:3F:A1:B8:0D:19:6E:3A:94:43:1A:AE:F8:F9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f38d8e8-f1b2-37e5-ad13-bd5211ae5dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.8.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:db:0d:53:36:84:ef:c5:fc:85:94:ef:d5:5f:50:b0:d5:d8:
34:21:10:f1:b6:a9:54:9c:dd:3e:ae:63:6e:88:89:cf:66:43:
a3:6b:c9:65:84:95:93:60:44:ff:cb:1b:de:50:9f:e7:74:c3:
a4:b5:34:37:36:69:38:a3:f9:aa:e5:11:7f:df:9b:4a:5d:b4:
c1:e4:fc:e8:18:5d:ae:4a:d0:39:73:1e:d6:8e:6a:b9:22:30:
f7:e6:82:06:5f:a5:d8:15:b6:b3:30:e0:da:75:61:9a:38:70:
fb:98:38:cc:73:ef:37:8e:f1:a2:3b:53:38:e0:95:35:bd:81:
08:2c:55:7d:ef:80:c4:69:d5:e0:f6:d9:97:d6:57:5b:c2:36:
43:1b:6f:ec:82:1c:42:0a:ab:22:50:b4:bd:f2:70:74:aa:97:
d6:a2:b5:c1:36:57:81:4a:f6:6b:51:a7:2f:85:7c:54:d2:d2:
1d:10:18:6d:3e:67:1d:0b:60:41:b6:64:cb:a7:0d:a3:8c:49:
65:65:13:9b:39:b7:9d:52:92:ea:c7:44:e5:97:72:81:6a:68:
c3:f6:cd:d7:3d:53:9f:5a:e7:42:74:63:60:7e:b0:c5:8b:78:
7b:b3:15:53:30:78:59:bf:fb:57:d1:ab:1d:a0:c0:ac:3d:71:
8a:0f:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:15 2025 by rpki-client