Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa
File: 20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa (raw, json)
Hash identifier: AFlzr7N6w+bFJNJ3F7Sa/cIgyERuT0z5Arfhj6qxYk4=
Subject key identifier: 89:B3:FD:68:78:58:DA:CF:28:63:56:EA:9F:7E:96:BA:65:C0:32:64
Certificate issuer: /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial: 010D0C9F4328584913AC2049C0E5B08661BBE2C0
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 40755
IP address blocks: 172.98.4.0/24 maxlen: 24
2606:3040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:20:49:c0:e5:b0:86:61:bb:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=59080b99-9105-48aa-8184-0f941494c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:50:16:90:36:db:77:6a:d6:27:8c:e5:38:
bc:a0:4d:6d:f9:7b:4d:8f:6c:d0:39:6a:70:dc:9d:
8f:63:b0:f8:9a:63:d5:51:06:28:4e:07:76:96:2f:
5c:d5:96:ad:e7:4b:5f:79:39:d9:aa:d7:fd:be:3f:
b1:b8:17:88:6a:f2:a2:d4:5c:12:ce:2a:72:92:ed:
ae:3c:28:be:3a:9d:04:ec:cb:8e:42:1e:8f:f4:0b:
94:b1:cd:53:bd:1f:1d:8b:2b:c1:15:7d:c9:d6:93:
45:e7:dc:d9:02:64:01:79:5b:fb:ee:45:9d:d7:0e:
e2:58:85:4c:1f:80:f0:09:1c:2a:a6:e2:0c:be:dd:
dc:a7:64:70:a8:97:cb:db:02:dc:a3:53:b0:d5:7e:
23:ab:2c:17:a3:4f:f3:66:8a:ce:0a:a8:41:09:1e:
cc:07:21:f8:29:af:7d:bd:16:65:0c:10:ee:c7:69:
47:36:20:f0:80:a0:55:68:87:d6:7a:4d:5e:0c:c0:
34:6a:ed:40:f6:c8:bf:3b:ea:eb:69:f8:e2:8b:08:
ba:2a:e3:3d:c2:03:53:2d:ae:1b:7d:fe:82:72:88:
de:96:f7:c2:10:9c:1b:63:7d:62:96:01:7e:69:04:
b0:25:25:9e:2c:04:58:d7:c8:2a:a4:32:10:23:92:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:FD:68:78:58:DA:CF:28:63:56:EA:9F:7E:96:BA:65:C0:32:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
X509v3 Authority Key Identifier:
keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.4.0/24
IPv6:
2606:3040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ce:0f:ba:ed:e0:e0:f3:51:d1:06:8a:6a:9c:ee:02:ff:6c:
66:a0:bf:9d:af:e6:28:71:fd:3f:ea:56:81:11:7c:a1:ee:72:
2a:d6:a0:40:16:fb:4e:c0:31:03:34:ea:32:e0:68:0e:72:78:
95:e5:cd:95:cc:b1:36:09:b0:1a:0e:30:6d:ab:42:31:1c:4b:
44:e0:be:9e:ec:03:73:71:9d:36:69:f1:cc:15:7f:fd:8d:22:
76:21:41:47:1f:30:da:0f:49:74:69:da:a8:4b:5d:9e:0d:e0:
3d:51:bb:3a:59:69:f0:82:cd:71:bf:00:f0:bc:72:09:69:c9:
e3:52:16:fc:6b:43:d3:25:f5:db:b2:06:aa:c2:71:a8:5c:db:
37:4a:b7:a7:0c:e6:25:96:8f:93:fd:9e:e3:fc:ea:05:28:25:
ba:54:4f:a8:66:c4:c9:51:43:98:dd:02:bf:09:4d:16:4d:8a:
68:05:41:e1:4c:08:81:a6:f0:81:c3:65:26:b0:e1:49:2e:7b:
e1:38:69:e7:a2:9d:cd:b3:38:26:b6:99:97:6e:c0:b7:a7:be:
ab:64:bc:9e:6c:ec:5d:df:e0:ea:b1:3d:91:34:5c:1a:5c:ea:
8f:0a:61:fb:3c:fe:1d:2f:8e:eb:62:49:59:18:37:9a:40:94:
77:25:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:45 2025 by rpki-client