Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa
File: aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa (raw, json)
Hash identifier: ZL/uP0xFZz38tCIcTwqU2Q/O5xnV81TFRTe4BkNy1Fc=
Subject key identifier: 54:9B:D1:14:BD:19:EC:DE:1A:A4:CB:31:2C:D5:C4:E2:DD:D4:2B:43
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C25DF666D566A0EF7B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11426
IP address blocks: 98.101.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c2:5d:f6:66:d5:66:a0:ef:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=617ccd04-5ee0-44d1-9519-5eb61706acdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:d4:6b:d0:33:85:61:46:fd:da:87:d2:5a:
f6:6d:ad:84:7a:00:ae:c6:02:2b:0a:01:98:08:cb:
8c:01:df:c2:41:6c:e3:44:4e:fd:2d:bb:46:6b:1c:
2f:1f:ae:8e:a7:f4:7f:68:54:23:ba:f4:95:96:a4:
89:ae:18:83:45:44:94:02:0b:52:92:ee:3f:88:d3:
c0:5b:14:1b:0c:19:5d:87:41:f7:9a:e1:ab:b8:fb:
fe:c9:ee:04:c1:84:b7:84:07:d9:68:c8:cb:77:89:
a5:d7:ca:39:db:3d:8c:04:03:fa:9c:4b:9b:c7:10:
50:c2:6e:a8:93:6a:91:02:4b:ef:8b:cf:b1:20:15:
8d:31:8f:4c:14:24:30:a5:6a:66:a7:ca:5e:61:4c:
87:8f:f2:bf:da:6b:be:8f:8a:e6:56:12:d2:d1:c8:
f1:e0:72:78:c9:0a:55:a2:c9:9d:0c:fb:f9:58:5d:
5e:70:08:66:ab:b9:8b:71:4d:f0:70:cc:55:97:bd:
85:92:84:ab:ee:62:3c:33:07:5f:91:43:98:13:5b:
c6:82:8d:7c:e5:dd:43:1e:03:68:10:03:db:4f:09:
8b:c1:fd:84:47:c0:cf:8c:fa:cb:4f:84:a9:7d:0d:
a7:e6:3f:87:9e:8c:4f:ab:ff:24:94:f3:c2:6f:04:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9B:D1:14:BD:19:EC:DE:1A:A4:CB:31:2C:D5:C4:E2:DD:D4:2B:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.101.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c8:c5:15:ff:84:69:38:8c:5e:6a:bb:ce:23:82:0c:9a:3c:
2c:6d:3b:b6:24:cb:d5:53:a0:62:00:46:d9:7d:e4:75:f4:3f:
cb:05:2c:79:92:c3:70:a8:9c:49:ba:6d:a2:2b:38:ad:43:44:
0c:22:d6:b2:60:c2:dd:3c:f4:c7:dc:7e:c9:b1:21:39:c7:f3:
99:25:18:d8:df:dc:ab:4e:27:cf:a3:ff:96:78:c1:5a:84:18:
03:19:45:59:54:27:69:66:3a:39:42:9e:8c:77:6a:cf:f7:5b:
73:b7:2d:4f:7f:83:be:1b:23:a1:c0:c7:9a:20:28:76:3d:d0:
de:72:d3:21:b5:f0:03:2b:99:c0:e0:78:7a:40:34:7c:41:54:
41:2e:d4:f4:c5:07:f2:c4:cb:fe:8b:ec:8b:cc:e4:f1:2b:35:
89:fe:6d:49:1e:1e:3c:9f:3f:d4:fa:98:a2:7b:f6:3c:c9:49:
07:2f:85:ae:e6:77:36:51:e1:b9:c5:80:e2:b3:0e:b3:e8:2b:
94:af:37:33:a7:07:03:9b:3e:96:93:1f:f6:6c:dc:7f:19:cb:
b4:e9:28:86:ff:fb:ea:ba:e1:ec:cf:13:85:9f:d9:e1:1f:75:
48:0e:6f:ad:7e:8c:fb:fc:5f:88:77:4c:55:11:73:5a:d2:af:
6d:a3:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:39 2025 by rpki-client