Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f390329f-b1d6-3ae8-995a-b73d77e86d74.roa
File: f390329f-b1d6-3ae8-995a-b73d77e86d74.roa (raw, json)
Hash identifier: F3iZ4l1eyfMmxQWczWrIllwiWXb/JgHU2YFSxvw+UnY=
Subject key identifier: 77:65:8F:4F:E5:33:7B:C1:F5:34:8E:0D:28:4D:B7:4D:A0:92:37:B8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F4DD52836224B1249780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f390329f-b1d6-3ae8-995a-b73d77e86d74.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 98.111.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f4:dd:52:83:62:24:b1:24:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=b946901f-5ef1-40a0-9e07-3c91ec007133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:de:a7:39:ca:c3:5f:f9:70:92:27:a2:1e:
59:2c:fa:7e:c0:1e:1c:b3:0c:a1:9e:25:cc:0e:cf:
03:8a:a7:fb:3f:9f:f4:d0:91:69:60:d9:72:ac:ba:
d3:06:64:a5:6d:64:36:3e:c7:04:dc:47:63:e1:49:
41:84:d7:1d:26:16:23:f1:cb:99:07:a2:e4:26:76:
a7:ef:de:1e:fc:55:bb:5e:b8:a3:c8:9d:ba:02:46:
e3:7c:16:59:52:66:1d:1c:d1:44:69:b4:98:78:2a:
03:d9:a3:50:87:20:35:cb:43:00:7c:a7:1d:31:d0:
f7:7e:f9:bd:a7:c0:d1:49:7f:2e:0b:61:6b:6c:d6:
f0:48:41:5f:da:da:2c:88:59:59:24:b0:15:66:93:
33:06:4a:2e:0d:c3:67:ee:50:8f:d5:05:e3:f1:96:
40:33:98:d0:d5:0a:68:c6:e9:85:8d:af:c4:61:11:
71:68:53:f2:21:d8:15:1b:70:42:dc:cf:35:b1:09:
eb:d5:86:64:4b:c5:7b:90:4c:6d:26:82:d9:68:8d:
d4:02:5d:31:84:b6:c6:75:2a:e9:ed:31:be:af:7a:
21:e5:0a:13:55:fb:cd:3c:55:eb:aa:b4:d8:1c:55:
a8:e4:1a:d8:24:13:8b:5c:42:dc:27:59:de:14:32:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:8F:4F:E5:33:7B:C1:F5:34:8E:0D:28:4D:B7:4D:A0:92:37:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f390329f-b1d6-3ae8-995a-b73d77e86d74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.111.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3e:29:40:06:92:71:44:4d:cb:b5:50:43:6a:4a:36:f9:9b:
bb:7a:97:49:2d:45:57:95:5c:0f:78:96:9e:7c:3e:16:91:e0:
bd:04:3d:30:29:dd:6f:1d:cf:c2:0f:43:9a:b5:da:7d:ef:88:
ed:70:be:b9:60:6b:e5:53:0d:1b:48:47:52:ff:67:0d:60:70:
b8:96:1d:2c:28:14:0b:8f:c4:d4:36:d1:5b:80:df:a2:d5:b7:
dc:1a:b2:51:56:16:9b:55:c8:be:43:b0:27:95:77:8f:c8:de:
7e:c8:9e:f4:a7:11:6c:38:9f:96:d6:e5:df:51:ff:e6:e0:30:
a8:f6:5a:14:b8:e0:bb:cd:c5:3d:1b:4d:64:c1:a3:6f:72:59:
e3:09:db:f1:75:45:56:5c:9a:27:fd:9e:80:9f:90:22:af:72:
06:56:b3:b6:71:dd:56:a7:c0:93:e5:b0:c6:4d:ee:b2:f0:82:
8a:dc:ab:af:78:6f:7a:37:dd:c1:7d:04:b9:b8:c7:c6:2d:22:
c2:73:35:88:c0:8b:69:ca:86:40:fc:fe:3a:67:71:4c:46:e3:
0e:37:da:df:96:d0:d6:36:6a:96:8c:4a:a6:36:60:dd:9d:a9:
fb:77:17:2d:6c:0c:ca:b6:ae:01:f7:d1:fb:69:8f:76:f2:d4:
65:81:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:50 2025 by rpki-client