Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e865d86d-d3b7-3890-b9bb-4f6d25267764.roa
File: e865d86d-d3b7-3890-b9bb-4f6d25267764.roa (raw, json)
Hash identifier: HM7VGa86oe5K4poy3VVbD9dWFflZktfw6f2+1V0bSrA=
Subject key identifier: 9E:35:55:93:93:AD:68:C3:E7:11:4C:F8:18:32:89:25:0A:9F:4E:44
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1539C694889E17D8F8870
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e865d86d-d3b7-3890-b9bb-4f6d25267764.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 98.147.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:53:9c:69:48:89:e1:7d:8f:88:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=fbfb5025-d397-40c4-b83d-47efb402e0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:63:27:ef:13:99:32:e5:22:27:e6:5f:51:
ef:7a:1b:01:ab:ed:19:76:86:59:e4:00:7c:11:49:
46:9f:71:79:5a:12:7d:fe:32:ef:a7:c9:df:5a:d5:
b2:4e:25:c4:3c:ce:10:25:9b:2d:1a:f6:dc:52:6d:
b4:c1:cc:f7:f3:d0:32:be:f1:3a:91:52:c4:01:21:
1f:fa:33:1d:38:e5:d1:f1:84:2c:e4:91:06:33:57:
72:29:df:4f:64:d8:3d:39:b7:87:14:79:76:55:32:
68:fe:f7:67:62:8c:4d:9f:34:36:19:e5:0a:56:b0:
70:9b:4a:15:59:38:63:1c:96:f3:b1:ca:ef:76:ba:
a9:81:ec:c9:7f:71:79:4b:d5:78:12:94:a1:3a:97:
35:e9:ab:69:f1:27:1f:94:fe:d4:58:5e:69:89:23:
d1:7f:73:06:40:f6:df:f6:f4:c7:cb:a1:a8:21:03:
60:b5:d3:f5:4c:17:b2:ea:b6:1c:0f:fc:ce:a7:0c:
9c:d2:58:5c:22:da:e5:e0:84:49:93:00:bd:3f:d2:
b7:4a:be:e2:6a:1a:fd:ff:49:34:1a:d6:c4:34:dd:
59:42:00:d5:06:6b:53:4e:3f:b8:62:ad:57:f4:91:
8f:15:78:cc:20:e5:6f:8b:77:a3:1d:fe:c6:a9:71:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:55:93:93:AD:68:C3:E7:11:4C:F8:18:32:89:25:0A:9F:4E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e865d86d-d3b7-3890-b9bb-4f6d25267764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.147.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c1:8e:02:84:55:00:f2:27:4a:3f:13:1a:5b:e0:fb:8b:c8:
9c:85:8c:27:41:e3:0d:24:1c:8c:f2:b5:5d:5e:60:e1:f1:e0:
f1:90:e6:48:46:6d:76:0d:6f:4e:93:32:a3:60:bc:9c:69:64:
6f:b8:76:36:9e:82:98:97:e0:17:2e:ad:92:e7:c4:42:67:0d:
fd:6e:a3:be:b4:4a:c1:1a:72:05:a8:ab:c2:b0:aa:0c:52:61:
bb:ed:3f:df:73:78:8d:8f:2f:9b:73:a2:91:7a:51:8a:5a:19:
99:26:44:11:63:40:30:4e:8b:74:0e:09:78:e2:c4:f0:b6:27:
84:ec:da:b9:cc:19:a6:ba:d1:0c:b3:1f:62:80:3d:dc:f5:c5:
0c:e3:77:5d:e4:75:db:2b:7f:ad:36:c2:4b:c3:58:b7:b8:a8:
da:38:db:aa:81:a2:02:53:2c:cb:2d:b9:f2:f1:9e:51:5b:34:
a4:ab:ee:3b:58:ea:97:b4:af:cd:af:64:37:c7:38:9f:98:4a:
9b:12:53:d0:11:61:df:2d:6e:4f:22:15:0a:e8:43:9f:4a:2f:
3d:4c:0c:b0:50:d9:cf:54:02:29:a2:cf:6e:6d:e3:9d:32:31:
39:a3:0f:87:4e:0a:a9:1c:3d:11:a7:01:f2:b4:9d:16:f1:a3:
b2:cf:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:18 2025 by rpki-client