Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json)
Hash identifier: UHxm2AvkNyE/oCu4rkh4oPGv+o5JEZl3GSPuVKGBjX0=
Subject key identifier: 03:6B:93:CA:B1:6A:BF:2D:39:5D:28:97:63:69:04:8D:08:71:7E:ED
Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8
Certificate serial: 010D0C9F432858489340B3B72900FC2C923D0000
Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 399521
IP address blocks: 172.98.8.0/24 maxlen: 24
172.98.9.0/24 maxlen: 24
172.98.10.0/24 maxlen: 24
172.98.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b3:b7:29:00:fc:2c:92:3d:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=2d88744e-c3ae-4f16-855a-1f6a8523de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:6a:7e:14:41:82:d3:20:08:8d:b3:07:10:
33:e5:2d:5e:bc:f9:76:19:94:9d:aa:cc:50:e8:c6:
e5:39:4c:ad:f1:c6:d6:56:f5:85:ef:63:d1:e7:20:
fb:9f:30:2c:1f:a5:57:ca:77:e9:9b:63:41:a8:5b:
bf:ba:87:90:83:c9:0b:c3:58:9b:f4:dc:c3:6d:a6:
d5:69:fd:2e:a1:27:44:2b:f1:d5:5a:70:c2:f5:e7:
56:6e:ba:c1:a7:4e:ff:b4:22:bb:7b:cc:ff:b7:ac:
94:9a:97:fb:e4:70:eb:ba:97:1e:be:73:a0:32:a4:
20:3c:09:94:29:df:d2:d9:be:1b:74:9c:92:64:01:
39:74:2a:ae:2b:27:4c:48:08:9c:3b:66:13:45:f5:
c4:70:63:6c:c9:c7:07:44:a8:1c:d3:d6:36:fc:de:
6b:77:6c:e4:f9:75:05:66:15:75:e3:7d:f7:a2:3b:
e9:84:a5:41:91:03:73:95:82:c5:1a:31:51:33:ac:
aa:63:26:c2:44:fb:ec:ff:e1:58:c4:ba:ec:59:d7:
ca:91:4d:9c:67:69:ce:c2:72:57:5c:b3:8b:30:94:
a8:c8:74:91:c9:98:d2:4d:87:c3:5f:55:b2:19:d2:
da:40:fd:ca:1a:a7:27:e0:cf:fa:8d:64:ed:51:4c:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:93:CA:B1:6A:BF:2D:39:5D:28:97:63:69:04:8D:08:71:7E:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl
X509v3 Authority Key Identifier:
keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a8:fa:af:e6:44:df:e8:24:9d:65:28:74:a3:8a:54:f7:f5:
1d:44:bd:d2:fb:c0:6c:2a:da:7a:17:33:6b:54:c5:74:44:1e:
bc:af:c5:e9:8b:7d:be:3c:83:b8:68:12:7c:af:8f:fe:ed:b7:
8e:ea:b3:bd:8b:e5:bd:ff:35:d9:fb:66:93:ed:d0:c7:9b:38:
e1:ca:6a:56:df:23:ac:4c:88:35:4b:e2:c1:7b:0f:22:88:be:
3e:39:33:c5:47:92:14:37:c1:8d:56:0f:46:7e:cb:47:d3:81:
47:ff:5e:08:4d:00:19:cd:b0:47:c5:49:32:52:d5:c1:1f:97:
a1:4a:44:58:c0:46:ff:c8:7d:2b:dd:8a:3d:de:bd:63:bc:38:
0e:14:ce:e0:28:ff:dc:76:47:d4:a0:0c:d4:e3:6f:18:42:3e:
1d:17:5d:9f:e0:5f:47:58:a7:e7:fd:ab:ef:09:69:0f:d5:30:
e5:53:96:54:30:95:d9:ab:9b:c0:85:9c:7f:41:9b:51:c5:90:
31:b8:2f:65:1e:f5:08:f8:8e:e8:a6:d3:7c:72:6f:c3:54:78:
80:0c:3a:da:db:c5:39:4f:ed:67:91:58:f9:6e:bc:0b:28:ce:
f2:73:46:e1:b7:75:20:2b:e3:80:00:c3:cb:1d:b5:49:25:c3:
d8:d8:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:21 2025 by rpki-client