Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa
File: 0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa (raw, json)
Hash identifier: o+v19O16Iz5T43pktBk9jP/s2pM7pRXEtQcujC3tA+U=
Subject key identifier: CC:47:63:F8:71:58:96:62:2B:11:2E:78:FF:54:05:D5:5D:40:55:F6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB576B454D870F82A11AB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 98.23.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:76:b4:54:d8:70:f8:2a:11:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=8294923f-7be1-4a42-9b89-bf25b63b9cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:a6:2d:27:c6:57:c0:40:b8:f2:1c:e2:3b:
58:ab:fc:ca:4b:af:5d:f9:99:d5:66:b1:40:aa:b3:
73:05:17:e4:13:37:7d:d9:13:ac:29:3d:37:a7:c2:
99:10:59:9e:67:84:23:05:c5:46:59:06:97:68:62:
c3:cb:fb:b7:0c:52:ed:62:45:09:0a:62:06:b4:7d:
82:dc:e5:7b:97:5c:fd:4e:8d:e4:79:a3:d5:88:52:
5f:fa:7f:91:19:2d:f6:04:bf:3a:f5:5b:71:22:c3:
c8:c1:35:42:74:6d:4c:65:0c:00:c9:95:f7:70:44:
ac:c1:07:b1:8a:16:18:1e:2e:18:f6:81:6b:35:3c:
99:b3:ab:e1:11:b1:eb:da:af:87:a9:9b:6a:99:bc:
30:a9:16:8b:c4:14:68:40:b8:04:68:66:9f:b4:2e:
d1:68:0b:f4:4e:a7:78:93:fa:77:47:68:88:cc:fd:
a4:db:31:e7:6d:16:c4:96:af:13:56:ed:18:ed:3f:
bb:44:35:33:e7:ff:61:24:b8:0a:6b:60:3c:9c:af:
02:e9:d9:64:b8:5f:2a:af:59:18:47:9f:b6:ab:49:
2d:14:89:eb:20:19:45:c7:e7:c9:7d:e7:cd:e6:7a:
af:cd:bd:2f:24:30:15:1b:4f:1c:be:60:37:13:43:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:63:F8:71:58:96:62:2B:11:2E:78:FF:54:05:D5:5D:40:55:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:05:bf:f5:a9:85:ef:da:c3:a2:6a:ed:43:27:6a:99:85:fb:
f3:47:15:35:98:11:22:a3:ac:0c:ab:cf:ef:71:f4:5d:19:7f:
b2:54:e1:9d:32:8c:74:3c:83:55:a4:06:1a:83:e8:15:17:9d:
e3:b1:42:c4:4c:d7:e9:5d:42:03:d6:b8:53:f9:18:a1:e8:9d:
d4:1d:16:79:36:20:49:39:74:a0:92:ad:98:09:bd:f9:70:75:
7e:fb:2c:0c:a4:9d:5b:a9:d0:e0:1a:24:32:82:11:cd:20:b2:
ce:ee:3a:fb:d8:6f:fb:ca:cf:6b:ae:02:03:d8:c4:b7:f9:f0:
70:a0:4c:b8:d8:45:db:0d:ef:ca:3c:85:1a:10:a6:ef:ed:cc:
04:78:e1:ca:db:fe:d4:fe:22:b0:96:95:12:a1:cc:bb:74:49:
95:bb:cf:12:ff:65:97:ca:81:b9:a5:a1:f8:4d:c8:ae:10:62:
2b:bd:cf:63:21:05:44:ad:7c:86:c5:2b:ef:96:23:b6:9c:71:
35:ef:34:47:4d:42:f9:71:d0:4f:f0:9a:ad:49:2c:31:2e:5c:
c1:f5:4b:9c:50:99:8c:85:08:e4:a0:74:3c:31:4f:da:08:11:
34:c8:bc:50:e6:61:73:61:49:d9:78:12:83:9c:e4:dd:08:5a:
13:5f:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:47 2025 by rpki-client