Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa
File: 6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa (raw, json)
Hash identifier: /sqfNXEecdNElR0LpYCUJaYUB1+nuhLv+IxsfnZAMXE=
Subject key identifier: 89:50:AC:95:0A:8A:DE:24:61:DC:8E:C9:DF:30:58:0B:20:6E:EF:9D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F8247B0D2E0F880A4000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 98.109.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f8:24:7b:0d:2e:0f:88:0a:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=601df2b4-0fc4-4dde-aa97-b47ac51848fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:ac:b3:eb:10:5b:bf:c4:79:f7:1b:8d:8c:
fe:79:5b:59:7b:c4:fa:16:f8:51:10:7c:5b:fd:95:
1e:c5:0b:23:f6:86:e2:cc:f6:ca:99:fb:be:e1:ed:
13:9e:7b:5b:7a:d3:3a:cf:4a:5a:92:8f:0d:9b:77:
31:3e:8b:de:55:0a:1f:47:46:ca:5c:8b:7f:b0:4c:
ab:cb:2d:87:cc:7a:3c:53:15:55:e0:8d:f5:20:72:
fb:ad:d7:87:9a:bf:c6:52:69:71:a0:fd:53:a3:25:
6a:6d:0f:40:06:d1:6e:75:cf:9f:a2:b4:bf:55:6b:
7d:6f:25:e3:12:5f:3b:85:f0:82:08:e8:5c:c1:1f:
8e:5c:9c:6a:ac:13:55:5a:c4:36:08:dd:ac:57:2d:
c4:6d:c5:68:4a:0d:66:79:fc:89:34:f1:99:38:23:
22:78:9e:d5:10:16:4c:84:98:4e:b5:aa:55:52:93:
a0:13:11:1e:f2:89:3f:10:36:b1:f1:c3:c3:ee:2e:
68:51:ee:4e:48:da:62:b0:ed:6e:26:4a:6d:d9:7e:
be:5c:6f:58:b5:69:c0:32:35:ea:12:37:18:37:7c:
1a:b5:45:d2:da:b9:e9:82:aa:93:1d:e1:fe:79:42:
29:61:bb:66:99:e3:45:cc:33:7e:d3:3d:c4:86:89:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:AC:95:0A:8A:DE:24:61:DC:8E:C9:DF:30:58:0B:20:6E:EF:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:05:59:af:35:dd:d7:f0:23:cd:d3:cb:24:83:e8:d6:92:01:
29:0e:74:ca:60:bd:b3:7c:44:69:70:31:f9:f8:26:37:ad:ba:
47:05:75:b3:b7:8b:a9:ee:c9:05:99:47:29:77:c9:10:06:db:
2a:79:b5:9f:69:64:95:df:b6:dd:1c:81:00:9a:f6:a0:0a:20:
0c:f9:3f:f8:d5:84:da:27:7b:a6:e6:4c:38:bd:5b:9e:d5:3e:
88:8f:6d:c9:00:81:b8:88:cc:19:95:7d:75:4d:b1:a0:c5:03:
02:55:2a:1e:a5:9d:94:51:d1:89:b9:21:7b:bc:19:b4:cb:98:
c9:8b:12:3f:92:57:1a:af:77:60:23:8f:8b:bf:34:23:f5:6b:
5a:d4:d0:05:ab:7d:28:94:20:7d:f6:0e:11:53:d6:63:5b:d7:
3e:00:02:a7:70:e9:45:8e:c6:74:b9:94:14:21:fe:b0:b9:91:
34:ac:18:8f:c6:3c:d1:7a:fe:bc:9d:a2:3b:c4:b7:39:55:3c:
66:bc:d7:5a:4c:4b:6d:bc:57:3c:6a:9b:dd:f1:70:a6:ed:3b:
11:75:15:f5:7b:d1:e1:84:dc:e9:00:03:57:10:05:fa:c5:cc:
cc:c6:e9:2f:18:02:79:89:fa:50:d3:02:e8:55:7b:72:f2:f2:
e6:07:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:48:30 2025 by rpki-client