Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa
File: 1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa (raw, json)
Hash identifier: 9o2tUt8c+Lql8MSyy+0lp+Wi6cexy0w+HMPmQTDQwMY=
Subject key identifier: A7:59:75:6A:9B:4F:F0:FF:8E:73:B9:59:2F:41:8F:40:A2:77:81:7C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155014325F028F7C09EE900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.22.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:01:43:25:f0:28:f7:c0:9e:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=022710d6-690d-4ce9-b96f-68af646ac7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:bb:48:98:ca:22:19:d3:6c:77:8e:52:2e:
e1:a1:67:10:be:08:3a:a4:20:70:51:95:28:a1:54:
28:51:e1:55:85:33:27:db:b7:dc:8a:bf:0b:98:06:
d1:d2:d0:01:e3:5b:4c:22:76:a1:18:a3:4f:e0:18:
75:12:79:c9:15:69:b8:a6:b8:3d:cc:46:06:bd:05:
a6:91:49:d4:16:c0:94:af:79:17:93:e7:32:14:11:
f8:f1:d1:5c:a4:9c:2f:cd:e9:c2:dd:22:32:9c:01:
b6:11:7d:49:26:24:45:00:01:1b:a6:ea:f8:74:c3:
e6:59:38:07:12:0d:fe:9c:8a:35:44:f7:85:a6:66:
db:c2:0f:64:8d:e4:b3:b2:9f:59:93:67:24:bf:b7:
54:59:0e:bd:e9:28:91:87:1c:2e:fe:d9:b2:9f:2a:
f1:5a:52:cf:d0:4d:6e:f1:c1:42:46:73:26:33:d1:
1b:50:0a:67:7a:dc:ae:1b:69:8d:e5:d0:17:3b:95:
52:d8:36:c6:92:b6:c4:38:7f:3f:61:34:25:02:a8:
d9:a8:3c:b7:5c:fc:32:33:84:28:49:f5:c4:48:8a:
8f:b4:b1:8a:4e:fe:71:35:53:74:62:b7:ab:eb:ae:
4b:c9:22:9b:b5:3e:b1:d2:fa:ca:87:51:8e:3b:6b:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:75:6A:9B:4F:F0:FF:8E:73:B9:59:2F:41:8F:40:A2:77:81:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:5c:5f:68:5c:b5:e9:74:55:a3:e1:cb:37:57:85:6d:8a:39:
68:e1:e2:03:8e:f8:5c:d7:a5:17:2e:a7:db:86:e1:f7:c1:f2:
55:ec:c3:61:18:3c:14:88:21:13:51:ff:86:08:6d:93:d1:03:
d4:c0:aa:d7:c2:9a:20:f3:54:d6:35:2c:4a:d7:09:62:b9:70:
77:2f:e1:44:71:03:88:cd:f2:ae:72:ca:4d:af:7e:ee:2c:4b:
57:0c:a2:72:51:9f:61:c5:1a:f6:d6:7d:cd:82:63:c9:02:0e:
98:d4:b8:55:ea:fd:93:bf:b9:b7:fc:77:03:a5:ea:a7:33:a5:
42:d3:2b:33:06:40:c1:e7:50:6a:32:57:9e:4c:55:79:c4:7e:
c2:97:c2:b6:06:47:f7:aa:9e:d1:90:1d:02:bc:41:f0:74:d2:
bf:46:e1:1f:de:74:21:7c:a4:80:3c:9a:15:10:ce:15:ea:da:
b6:08:73:15:d6:2d:cb:35:85:bb:21:89:8f:65:e5:0f:3a:85:
48:14:d7:90:3b:54:a8:0f:ae:f0:da:78:00:8e:ba:2f:4c:56:
9a:f5:7a:8d:4b:2a:df:f2:a6:5e:7b:69:b3:fa:ee:e8:87:7f:
53:4d:41:d4:fa:c8:d5:41:d5:fc:28:41:f6:28:9d:b5:b0:ee:
a4:25:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:54 2025 by rpki-client