Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa
File: d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa (raw, json)
Hash identifier: Hzusg0NqRikK20R9/xLmLgawIjD2ybrlFpwfdZ42usc=
Subject key identifier: 68:58:AB:AA:AE:02:EF:95:A8:24:BA:E1:8D:FF:81:17:A2:BC:A0:85
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848F22BE3A8C97D5E734FFD2FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 400901
IP address blocks: 98.123.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2b:e3:a8:c9:7d:5e:73:4f:fd:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=ca8e004c-6483-4620-af71-b506e0d245d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:3b:ce:27:26:2e:f4:a2:ab:59:21:f3:f7:
e0:bc:06:e0:e5:22:75:43:2e:0d:0b:a7:a9:c3:2e:
a5:d9:ff:ed:7d:6b:8a:ec:ce:3f:80:99:8e:dc:fa:
f8:f7:38:42:26:ed:57:ac:80:5a:bf:85:9b:d8:5e:
28:c0:25:d2:92:7e:9c:1f:0f:a0:e2:93:a4:a4:61:
de:f6:27:f4:25:47:e6:d6:84:d0:c7:fa:20:3c:52:
c8:5f:49:08:1e:d6:dc:ff:ef:4f:cc:13:c9:1b:2f:
be:6d:64:66:01:80:6a:f0:d2:2f:4a:ab:18:eb:df:
a0:dc:63:1f:c2:bd:5b:3a:3b:8e:5e:74:da:fd:e7:
54:37:80:40:af:14:ea:6a:f8:97:e5:c3:36:c7:ae:
6a:ea:ee:5d:f5:af:4a:2e:a3:4c:f4:98:c8:e6:05:
b7:78:68:94:d1:1d:fe:3a:75:92:38:d7:7f:35:4c:
33:f6:ec:e6:79:a7:62:19:4f:a4:78:95:8f:2d:ab:
dc:b3:3e:7e:ce:6b:34:24:4c:16:33:ea:16:7c:b3:
84:71:2d:72:80:e7:7d:8d:3e:39:a6:d3:8d:d1:a2:
4f:7d:27:dd:eb:d9:98:24:42:da:ff:a9:6a:c1:65:
6a:88:4e:48:a5:8d:12:8a:ee:3e:21:18:c2:23:e3:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:AB:AA:AE:02:EF:95:A8:24:BA:E1:8D:FF:81:17:A2:BC:A0:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.123.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:be:f7:fc:7c:3e:e7:c5:af:41:ad:c1:5d:f8:79:ca:57:97:
07:3c:c1:ec:bf:c2:37:bf:45:d2:5c:0e:e2:dc:77:12:65:24:
ef:2f:b9:1a:67:a0:14:81:75:70:98:9c:48:dc:28:c1:ed:f4:
11:97:97:9e:03:da:64:7e:13:4c:14:f8:d8:29:c9:dd:50:4e:
9f:9b:f7:b6:d5:02:d7:ed:a3:f2:c5:9f:dc:ce:dc:0b:db:63:
05:5c:71:ad:25:04:05:b5:76:0d:cc:32:48:7f:9e:27:ed:74:
1c:30:37:4d:f4:c5:b4:f9:2c:35:8a:2f:26:9c:e0:64:a3:09:
f7:92:f2:56:b1:66:d5:0c:4d:a8:09:4d:49:ec:a5:85:a6:8c:
fa:9f:d9:0b:4b:54:d2:ea:1a:d4:35:32:8c:11:36:e9:95:3b:
39:19:55:71:18:d6:bd:e2:7d:87:67:3a:33:c0:73:32:18:f7:
12:e2:3a:dd:d0:8b:5e:b3:d0:5c:6b:9d:04:91:93:bb:8e:22:
a5:51:d4:73:42:a1:2e:b6:a1:53:a0:0f:52:30:5c:2a:a7:8c:
9c:a5:3d:7c:63:a2:f6:46:ea:6f:be:71:5e:09:0a:de:18:ee:
9d:ec:4e:14:69:34:ce:a1:5c:86:58:2e:4c:db:3c:82:37:1e:
f5:61:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:19 2025 by rpki-client