Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa
File: 8af32f4b-3d49-34a7-907b-43985f15f53e.roa (raw, json)
Hash identifier: eytFplZcarlDMvVIT7B7I8NEfTzlMkI5gCoTeNM1czM=
Subject key identifier: C4:CA:AB:47:AC:9C:70:29:9F:19:C6:40:73:E6:67:41:05:CB:58:39
Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial: 010D0C9F43285848CC7B9044344885E839F8A600
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 98.142.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:90:44:34:48:85:e8:39:f8:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=3071180d-8946-4d9f-bad5-5661426d71c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:ff:f8:3e:4e:64:fd:bd:84:7f:fd:80:5e:
ea:f0:f9:f4:fb:58:5e:a0:2d:9b:cc:c6:77:db:94:
73:9a:a0:be:ef:bd:a9:3e:35:c6:41:ec:75:02:54:
eb:ca:cd:9c:b8:88:60:4c:7e:88:c6:f2:b8:22:76:
13:53:fe:bd:37:b9:f2:20:d0:e5:30:81:a5:b0:1f:
8d:53:46:d4:5a:a0:14:9b:9a:f7:1e:ae:8c:32:bd:
2d:49:8b:cd:b7:07:08:72:21:9b:8e:1f:8c:d3:b2:
09:f0:5e:9b:22:a0:f9:2e:27:93:5d:c7:73:5a:3a:
bb:80:f8:32:cb:f8:f4:78:58:40:1d:93:60:33:41:
00:f5:8d:83:a9:de:99:ff:eb:81:30:29:6e:8e:e7:
f9:7f:c7:2e:1e:81:2c:33:e6:4c:24:01:e8:1c:87:
c0:6a:2d:f9:eb:3d:eb:25:28:7c:c3:d4:b0:3c:19:
b6:29:b9:6a:96:8e:b0:22:55:14:91:6d:48:64:ed:
ec:23:a4:d0:d9:97:ea:c7:05:77:f9:e6:86:73:7f:
b9:d4:8a:5c:2f:07:de:90:ce:d2:c1:60:55:72:fd:
52:37:10:a5:b2:ef:ab:4f:16:f0:f2:d4:25:f4:05:
0e:2b:be:9b:5a:61:b7:c0:6b:3b:81:ff:42:11:ee:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:AB:47:AC:9C:70:29:9F:19:C6:40:73:E6:67:41:05:CB:58:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
X509v3 Authority Key Identifier:
keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
sbgp-ipAddrBlock: critical
IPv4:
98.142.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:04:d1:c2:22:56:32:9d:5c:0c:0e:e6:69:67:1b:f8:a8:b6:
20:c5:60:b5:9a:13:4e:7a:52:12:ed:99:ac:ac:ec:a3:e8:48:
ea:34:26:e5:a5:31:02:06:d2:74:16:ec:7e:aa:26:0b:38:66:
23:1c:83:75:c7:ec:21:bc:49:3b:02:b3:8a:b3:ea:92:11:3c:
37:85:94:0b:01:28:86:1f:5b:95:0c:cb:d1:58:34:a8:52:d5:
70:de:f1:34:bb:60:39:03:fe:cf:5a:8b:42:c8:25:ac:e9:3e:
c3:1b:8a:af:46:b4:e9:05:08:ee:5a:b1:d3:07:9d:d3:2b:4e:
a0:3f:28:78:e8:3e:ef:f6:8f:c8:06:c6:26:49:75:41:8c:12:
73:cb:2e:e8:6b:eb:5c:42:34:4c:c0:1e:a2:47:87:f9:bb:6f:
ae:a2:02:a0:6f:30:69:ef:6b:96:b5:ad:2e:ee:99:04:81:5c:
26:15:d1:60:47:3c:09:ec:fb:9c:c1:33:b6:66:e9:a9:e8:99:
aa:5d:22:a4:60:c6:60:4d:01:be:b4:eb:ee:b8:56:24:64:30:
5f:0c:c1:03:12:a6:a8:6a:28:20:3a:ad:e0:72:ed:5a:7f:64:
78:82:76:90:ce:15:1a:2a:48:59:e0:52:54:1d:70:a4:92:b1:
b4:3f:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:17 2025 by rpki-client