Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
File: 3708b2e2-b1f4-3516-a6cc-623967a05732.roa (raw, json)
Hash identifier: H7BAofZ5mxNkRfxMuPCDfMg+s5G3ZNuDhso8xLCMGeI=
Subject key identifier: 11:12:17:15:E8:76:71:D4:03:6B:1A:24:C5:6E:C4:D5:08:A1:3C:95
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F2B346FAFBD985919E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 98.117.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f2:b3:46:fa:fb:d9:85:91:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=fb1c524a-fb8b-49f9-9c74-d455ef48be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:0a:e7:ba:dc:16:40:94:d7:d7:97:f9:ce:
0d:c9:07:2c:9d:0f:46:dc:f6:ad:21:e1:69:e9:1e:
33:80:c2:3b:87:d5:02:dc:bc:79:84:e5:40:ef:ff:
6e:ee:4d:f4:12:a6:b1:5f:7f:61:b2:a0:37:c0:2f:
a1:ea:93:70:c7:38:04:db:65:91:34:96:24:b1:eb:
5d:f5:30:01:20:6e:b5:96:04:09:89:e7:f3:8e:fd:
0c:cd:61:e8:ea:5c:88:d5:2e:5e:43:c1:90:ac:cc:
50:99:12:7d:cd:77:6f:fb:90:fb:a6:95:ce:bc:5e:
52:76:1c:15:03:62:0c:38:c8:5d:1c:b2:f4:90:de:
04:85:65:13:2e:17:2d:df:dc:7c:0d:8a:0e:7b:72:
28:6b:02:8a:74:cf:66:ec:00:2e:7e:2a:b6:b6:1a:
77:dc:bb:97:07:48:00:7f:6b:37:a5:e3:fe:8a:c1:
c6:f7:ab:df:b0:42:c5:08:1e:86:bd:32:ef:3d:ff:
b6:79:2a:4f:16:72:fd:15:45:06:57:17:6d:80:2f:
6f:24:31:b9:69:27:6b:7b:7c:a2:d2:4f:27:8a:a6:
c3:a7:d2:8a:00:1c:b8:04:77:56:01:87:b7:68:16:
34:ea:b7:65:2a:be:dc:1a:7d:12:08:12:bf:8f:fc:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:17:15:E8:76:71:D4:03:6B:1A:24:C5:6E:C4:D5:08:A1:3C:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.117.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7f:2d:94:81:87:56:71:2f:63:d0:96:57:ba:ec:d7:14:c2:
ce:9c:e5:b0:dd:80:e3:48:b1:e0:9a:64:30:b4:b8:79:d2:93:
0e:8d:0a:cd:b2:39:94:40:9a:e4:08:ea:de:90:0b:a2:d4:df:
92:df:2c:28:90:48:7d:8f:da:f6:2a:14:be:ed:32:f9:6c:c9:
3d:63:43:fe:4a:18:0c:32:15:8c:d1:32:b1:a8:c0:83:a4:e5:
27:5b:50:68:d8:f3:80:f2:cc:22:34:88:b7:11:ed:1b:b6:35:
b3:87:4a:4d:ed:94:e2:d5:4d:0a:97:6b:8d:6e:3e:27:8b:02:
90:4f:25:5a:f5:1f:12:c9:b1:f3:86:f4:a9:56:6e:6e:2e:5b:
67:bc:6b:ea:07:3a:91:e6:78:62:95:ce:f8:d2:2b:34:c1:3d:
a0:cd:15:43:33:e6:80:e9:d3:5a:ac:6e:d5:54:dc:79:88:5c:
18:4f:46:80:cd:a8:c0:60:5c:74:06:7e:e5:f3:8f:92:11:e0:
6e:ea:ea:58:dd:d1:24:b8:d5:c9:ad:f4:69:12:fb:72:5d:74:
46:ec:e7:2d:76:3b:51:33:43:13:d3:a6:68:55:96:9d:19:77:
bd:88:8d:cb:ae:11:82:1b:1f:bc:2c:d5:ac:f4:cd:e4:73:cf:
f0:16:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:33:43 2025 by rpki-client