Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee666511-308e-35fc-849b-78c209bcf6ca.roa
File: ee666511-308e-35fc-849b-78c209bcf6ca.roa (raw, json)
Hash identifier: epMhzje5b8s54KHf1/zU6XGKCZ2iy6AGaAf+GEHA93Y=
Subject key identifier: C7:C6:ED:C4:E9:FF:DF:1D:70:AD:F8:3E:32:F8:A4:99:F7:E1:77:99
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D12999AC3AA0D957336A30
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee666511-308e-35fc-849b-78c209bcf6ca.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 98.28.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:29:99:ac:3a:a0:d9:57:33:6a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=ff18a901-6072-4e49-bffe-e8b5d8a7ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:39:d2:21:6e:bc:42:dd:7d:3b:2c:47:e2:
c1:98:6d:96:1d:ec:9b:d3:aa:1b:df:50:a6:e1:b9:
49:2c:5f:18:cd:41:90:e0:5e:e0:32:84:7b:17:70:
81:aa:ec:a3:db:c2:55:32:4f:29:24:09:4a:e9:e8:
ff:a7:cd:16:0a:77:ac:dc:96:a2:18:56:17:d7:48:
f4:d3:ad:b9:53:18:69:2a:86:03:68:8a:2b:1a:40:
f9:c8:57:10:dd:1f:66:85:69:52:bc:bf:0e:90:d6:
1e:2b:52:c7:1f:78:96:ea:ab:11:e2:ba:60:aa:1a:
2c:53:37:fb:11:97:94:e5:5c:c6:a6:3c:27:3f:47:
8d:72:74:3d:ed:49:70:49:87:43:40:48:6b:d1:17:
24:0c:5f:9c:6c:fd:05:75:59:ad:8d:34:97:da:8c:
e6:28:6c:6d:23:29:c2:34:2f:18:4b:f5:82:76:42:
81:0d:27:00:2c:4d:74:c6:b2:d3:73:9f:37:df:0f:
d8:59:71:4c:59:dd:c8:b9:3f:da:46:4b:b2:cb:60:
2b:cb:03:a5:cd:2a:c5:6e:cc:d6:c5:fc:91:13:81:
a4:cd:95:67:c3:56:d7:e4:65:af:58:0b:9a:f6:b2:
6b:f9:b3:a0:9b:21:83:6f:d7:5d:2f:06:99:5c:ac:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C6:ED:C4:E9:FF:DF:1D:70:AD:F8:3E:32:F8:A4:99:F7:E1:77:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee666511-308e-35fc-849b-78c209bcf6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.28.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:86:47:8f:43:08:63:e6:33:96:21:7f:82:51:87:25:5b:65:
2c:26:00:c5:61:5e:9b:55:13:1d:2d:87:fb:c6:bc:ef:67:aa:
eb:a5:2f:8f:d9:1d:23:7b:fd:c6:be:c6:68:86:57:52:62:3e:
13:30:9f:b7:75:2f:c9:3b:3f:89:7d:98:27:90:48:12:fe:c1:
65:5f:27:f8:6e:72:21:ba:a2:e7:25:b4:c5:ab:d1:b7:c2:b5:
4f:d2:7c:b1:ea:79:b1:95:89:c2:b4:f3:83:b0:8c:77:06:dd:
b1:e8:f7:30:52:b2:96:95:99:67:26:c8:6f:dd:22:af:fa:5a:
2f:84:db:c2:04:42:dc:0e:02:96:0d:58:cd:4f:c6:16:24:45:
e1:8f:77:0a:26:48:2c:ec:85:4a:e7:14:4c:d2:9f:aa:2c:03:
6c:82:eb:48:db:91:8e:b8:50:69:c0:fa:c8:95:83:ac:71:b8:
b4:c9:d2:03:c4:f3:ad:77:13:ed:e3:ed:3b:51:b4:1e:30:a8:
82:53:97:c8:ac:df:c3:86:8a:b3:9b:97:e2:fa:8c:b5:f1:d6:
a7:f4:2d:79:14:e2:c3:42:d4:7e:a9:3f:45:64:97:b0:59:e3:
b6:8e:1e:68:ff:6f:28:40:cb:06:f7:cd:54:a3:cf:2b:c1:7c:
18:35:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:20 2025 by rpki-client