Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b8647f32-8c49-3e20-80e7-d36a19d8299f.roa
File: b8647f32-8c49-3e20-80e7-d36a19d8299f.roa (raw, json)
Hash identifier: 3LDlSPywUCOUTrCABV3mP+lTabPwqi5G9vyBa1cr4Ys=
Subject key identifier: 8C:71:A6:79:85:C7:62:8D:EF:95:FF:FD:8D:71:E7:A5:78:32:43:A7
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14D2339049BA46AF7D540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b8647f32-8c49-3e20-80e7-d36a19d8299f.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 19115
IP address blocks: 98.8.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4d:23:39:04:9b:a4:6a:f7:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=7216e3be-631b-4cd6-b285-0011566ed7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:0b:93:fc:3d:dd:48:30:a3:b9:3b:1e:4f:
e8:75:03:98:75:fe:b3:2b:fc:58:be:d4:75:95:f1:
33:ad:8c:3c:d2:3b:40:ed:8b:2e:8b:66:9b:15:56:
f8:91:32:ed:f1:b6:17:e1:7b:d7:79:76:8c:cf:66:
6e:13:e6:a3:83:e2:41:71:ac:f8:5a:a0:68:1d:c7:
35:b6:90:d7:c5:40:98:24:bb:72:df:f4:ee:49:38:
a5:3a:f5:3f:0a:5f:61:c2:5d:e4:c6:7c:b5:82:6d:
9d:5a:5a:6f:81:a5:1e:a3:27:ac:b2:16:fc:39:2f:
61:e8:18:83:1a:e4:35:92:be:f7:3c:b2:99:64:71:
d4:62:42:86:f4:b8:26:66:73:9c:d3:23:46:72:21:
1b:12:ad:68:62:a9:51:cc:fd:9f:8d:df:2d:d2:f5:
fe:d8:8e:d8:48:6c:52:bc:64:a5:ec:e5:6b:c3:e8:
90:72:bd:24:0e:29:6d:41:07:6e:df:04:70:03:40:
a3:85:9d:b7:f1:9e:3b:8a:3a:b3:32:9c:4e:02:c2:
a0:dd:84:c4:69:5f:cb:c4:f2:35:12:95:87:ab:62:
15:ee:f7:1d:3b:38:1d:2b:4b:2e:75:ef:98:dc:ed:
d8:d7:9e:dd:00:c1:c7:6e:e0:e6:9a:eb:6c:a8:92:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:A6:79:85:C7:62:8D:EF:95:FF:FD:8D:71:E7:A5:78:32:43:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b8647f32-8c49-3e20-80e7-d36a19d8299f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.8.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a8:5f:55:aa:45:74:35:1d:0c:d6:7b:d7:63:2b:96:4d:e3:
c2:08:e8:0c:d8:91:9a:60:25:01:3d:56:3a:22:92:15:be:7c:
ed:c4:29:51:2f:52:c9:f5:e7:5b:93:02:ac:7e:35:7b:ba:39:
99:94:b6:20:c6:b5:ed:1a:b7:1c:18:17:c8:43:67:af:9e:fe:
df:85:e8:6b:73:ae:4a:84:79:18:84:12:ad:12:5f:63:02:df:
c9:a8:e4:7c:67:41:8d:9c:7b:dc:30:d6:d9:63:1f:8a:9e:49:
15:ca:1f:5b:73:1b:b4:bf:ac:3c:df:34:4b:9b:65:36:9d:e0:
f9:d8:1e:fa:09:3f:04:6b:86:18:a5:96:27:18:a0:08:00:0e:
40:e4:d6:da:06:d2:a2:c8:e0:5b:5f:64:6e:52:f1:9b:40:32:
d9:5f:3f:1b:8f:e5:b3:4f:23:2f:bc:24:00:ae:46:62:67:c3:
b9:d9:4c:11:03:23:f0:bf:40:ce:d6:83:7c:21:24:f9:33:89:
79:db:94:2e:5e:55:db:d7:2b:3d:fd:6b:ed:57:d8:5e:5e:0b:
29:53:72:18:4b:3b:04:0b:3a:ec:55:a5:02:d9:38:02:24:b7:
d5:02:bb:37:ff:bd:0a:4c:c2:5c:8d:de:57:99:fb:0a:0b:29:
7d:c0:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:49 2025 by rpki-client