Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa
File: a5e6d856-a0a9-3273-8466-54b9fac287ab.roa (raw, json)
Hash identifier: 3EPQLU7z2HulGH5qqsLCL8wCkPpNgDuPZqSGKcbKjb4=
Subject key identifier: 58:56:8E:0C:BC:28:3D:BA:CE:7B:BD:6A:2B:51:C2:6D:CD:C3:6B:30
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F5E9A69839A16CC00100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 98.111.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f5:e9:a6:98:39:a1:6c:c0:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=11ba0cb7-2d17-467f-9216-334888fbdb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:4a:bb:97:8f:6e:5d:01:94:65:31:69:83:
e0:0f:80:5d:ba:16:7d:b2:25:18:8f:30:40:f1:b1:
be:e1:18:b4:53:c1:5d:99:d7:0f:9c:6c:79:57:5e:
2e:53:30:34:d7:12:c5:77:19:22:11:73:0a:78:28:
dd:df:ce:59:3c:15:a7:06:f5:8c:6f:a2:3e:45:36:
e9:72:5d:eb:2b:9c:21:7a:55:d3:d2:01:89:ba:b4:
a3:2d:ea:d6:da:e2:ba:19:69:cd:22:af:92:4d:9a:
de:46:74:49:f7:da:3a:74:cc:c4:05:85:8a:8a:7b:
93:b1:59:26:46:f4:64:4a:14:52:95:95:ff:6e:89:
24:1d:57:1d:ff:3b:f7:a9:a2:ac:e4:67:eb:3c:87:
64:a0:87:9e:2a:bf:ac:72:2c:aa:38:5f:75:cf:b9:
34:d7:78:34:4d:04:70:34:fd:75:1c:d5:b3:81:e1:
fd:7e:a4:00:bf:40:82:36:42:aa:38:a9:ea:39:6b:
5a:ac:b0:8e:55:b2:5f:59:3b:0b:34:f9:2a:4e:be:
6b:32:cf:fc:45:05:a8:97:78:7b:5a:f0:26:67:9a:
c4:17:a3:82:ba:de:c4:78:cf:4a:b0:ac:70:ba:f8:
12:c1:f1:5a:40:db:2e:59:55:14:3f:31:98:70:6e:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:8E:0C:BC:28:3D:BA:CE:7B:BD:6A:2B:51:C2:6D:CD:C3:6B:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.111.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b4:5e:7b:3f:e0:85:3c:fe:3d:31:ad:c1:7d:b9:d8:c2:32:
f9:91:c5:35:89:50:19:2d:47:6b:a7:81:7f:b0:53:7a:b7:bd:
6a:56:12:1e:71:b2:4a:fb:4b:4d:73:7f:15:1e:53:46:55:de:
76:34:73:fe:0d:1f:29:de:c2:07:0c:47:ac:ad:ca:1f:dd:33:
9d:0f:f5:5f:89:10:dc:fb:fa:67:e6:07:0e:37:ae:c5:95:5e:
aa:59:27:2a:f7:c0:69:37:22:5f:b9:3e:9f:8f:c0:fd:63:5b:
11:03:49:7e:b1:82:7d:28:95:24:dc:12:59:ad:e0:9b:16:bf:
bd:0c:ef:60:d0:25:cf:b2:6d:dd:2e:c8:d5:12:ac:b5:75:83:
5f:2b:c8:b1:ba:90:74:7b:4c:e2:b1:81:c9:85:aa:48:28:e2:
ed:fb:9a:a3:93:44:eb:04:15:22:11:70:76:08:ab:06:8c:77:
b8:7e:72:d8:a3:9b:77:83:9d:06:de:6d:a0:d0:6c:18:03:29:
f9:47:c9:66:0c:a5:cc:7d:b9:fa:2d:f3:5e:2c:28:c8:ff:59:
47:77:b1:14:f4:60:06:83:4c:cc:ec:d2:49:89:f8:d7:5b:49:
f4:1b:0e:ed:e6:4a:c8:a3:ce:cb:6e:88:d8:8d:8e:f8:dd:fc:
50:91:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:16 2025 by rpki-client