Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bffc31da-1b79-3048-8994-3fc619915f43.roa
File: bffc31da-1b79-3048-8994-3fc619915f43.roa (raw, json)
Hash identifier: EM8VC6BS5siRcYQR/K2KGmzIrKx5LX0lxh8lp2gvFao=
Subject key identifier: 88:86:E5:F5:8F:DE:83:4B:CC:A6:26:FA:96:D3:E8:09:6B:9D:6C:80
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D02C534C66B1C9330880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bffc31da-1b79-3048-8994-3fc619915f43.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 98.111.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d0:2c:53:4c:66:b1:c9:33:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=43abb6ef-1cfe-4955-b7c3-8f8614d4111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:df:32:29:dc:a2:19:9c:3b:44:29:11:64:
26:bb:3c:8e:0e:a2:b6:3e:30:0e:e4:86:2d:d5:54:
cc:92:92:ff:64:12:7f:27:8b:31:cc:b0:f2:18:36:
3b:47:7c:e5:51:2a:dd:a8:ac:47:75:77:b3:30:7a:
70:19:f9:10:e7:cc:75:e9:f0:0c:92:7b:63:2c:9e:
c8:dd:2b:38:49:e2:8e:3b:13:2b:1e:6c:fa:7c:dc:
69:af:6a:7d:0e:6e:b5:a2:06:99:07:33:9e:bc:6e:
42:02:ab:e6:41:70:a0:a9:4c:31:76:25:0f:54:45:
60:09:1c:98:da:be:70:c4:82:01:e9:f3:ee:bc:2f:
80:a2:cb:6f:80:ea:89:df:fa:83:4b:08:71:ba:3c:
77:76:54:31:6f:11:90:e9:a0:b4:94:6a:f4:a6:32:
7c:16:66:e6:89:d1:c1:96:91:e6:c7:1a:7f:f4:23:
a0:53:07:ed:e3:c1:3a:54:db:cf:19:0f:36:f3:ab:
1b:76:75:60:5f:ae:d2:41:4c:84:dd:da:bf:37:8f:
bb:01:7c:9d:0e:46:51:cf:1e:39:a5:c6:bb:b8:f3:
28:ef:1e:23:d0:b4:84:fe:db:5a:0f:02:96:4c:48:
86:38:aa:24:38:45:de:ac:e4:99:90:21:ac:75:33:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:E5:F5:8F:DE:83:4B:CC:A6:26:FA:96:D3:E8:09:6B:9D:6C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bffc31da-1b79-3048-8994-3fc619915f43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.111.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:f3:2c:99:97:83:ef:f6:d1:93:33:1d:aa:b9:7c:60:2e:4e:
bd:e9:0e:d8:30:c7:02:13:c3:c0:fd:b7:9a:54:70:9a:28:03:
7d:5d:14:e9:78:f1:80:44:83:e3:5a:e9:4f:05:9e:b0:09:4d:
42:2a:4a:69:57:14:01:86:2b:87:95:c6:d4:e9:be:d9:0b:d4:
91:2e:4f:fd:80:b0:4e:6c:94:17:36:97:17:fe:d7:ae:47:52:
d5:8f:d6:3e:20:4d:5e:cd:ea:41:b0:14:5f:ea:63:00:f9:97:
00:cb:e7:10:94:2c:95:e4:8d:a4:16:f9:61:17:f7:c0:45:20:
37:e2:22:f2:1e:49:3e:c8:8b:34:fc:c6:10:e1:d6:7c:af:9d:
be:b2:9e:83:d8:41:45:68:05:a5:0d:60:2b:cf:d4:cb:48:55:
44:71:7f:b0:aa:13:8e:7e:9e:54:4b:61:0a:a2:3a:bf:be:aa:
8d:2c:9c:4e:7e:ee:65:fa:19:f6:77:78:39:50:3c:bc:b2:38:
cb:79:dd:b2:bf:0c:c8:a5:c4:62:57:b5:59:17:fa:e2:78:d2:
e6:c7:15:62:10:9d:7d:9b:dd:d7:3e:7c:f7:8f:36:fc:ac:2e:
f4:de:42:8f:d9:69:28:ae:1f:2d:34:7a:fe:32:89:ec:61:11:
9e:24:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:53 2025 by rpki-client