Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa
File: 1fddced0-2e72-3596-8537-ffc44a66bfd2.roa (raw, json)
Hash identifier: +GkX3tIpEsel+u9CE+yEbnt8JXUPs3u2ROp85JDEJfk=
Subject key identifier: 3B:01:75:58:EA:6A:EE:EC:15:13:9C:19:9C:48:39:BA:7C:2F:65:32
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30645A01D713A504559600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa
Signing time: Tue 21 Jan 2025 20:37:55 +0000
ROA not before: Tue 21 Jan 2025 20:37:55 +0000
ROA not after: Mon 21 Apr 2025 19:37:55 +0000
asID: 7029
IP address blocks: 98.19.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:64:5a:01:d7:13:a5:04:55:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:37:55 2025 GMT
Not After : Apr 21 19:37:55 2025 GMT
Subject: CN=aafd4c8d-bbec-4278-81cd-d5e8e85a5782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:1b:5e:1b:82:f9:b6:32:81:a0:55:64:18:
08:21:c6:92:e5:47:bd:b7:d0:e5:87:0b:fb:b2:cb:
69:92:ae:95:79:2a:de:33:f8:6c:de:a3:06:46:68:
36:ca:2b:71:cb:1b:55:21:63:63:8d:1b:62:31:60:
b7:e1:59:00:b8:c2:b9:22:f6:40:a1:36:23:4e:63:
b3:88:be:25:e8:66:d4:45:60:0a:37:91:9d:a8:43:
e6:cd:9f:0a:20:16:c4:6c:5e:01:6d:ab:90:5f:90:
c3:a8:4f:cf:83:2a:31:88:ae:33:3c:55:d9:31:f9:
12:b1:a9:48:9e:10:10:f8:e1:23:c0:d7:81:62:c4:
79:bc:c3:92:48:5b:b3:4d:e9:88:92:f4:c4:d5:7b:
c7:34:16:ee:ff:08:4e:6a:39:51:5e:8a:67:eb:0b:
45:a3:e8:43:fb:0e:c3:0c:4e:c2:b2:9b:0b:e3:29:
d0:c4:61:3f:04:82:d8:a7:01:d8:98:f9:78:0a:dd:
ac:20:6d:79:2e:b9:f9:80:a9:7c:1c:5e:04:0b:f0:
9a:47:88:f9:8b:93:47:36:12:7c:5b:c0:75:8a:3e:
97:17:76:8c:be:d9:3f:58:a4:72:24:7f:3b:85:b5:
c6:51:8d:4e:ce:b5:38:3c:78:d5:9a:0e:ad:bc:22:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:75:58:EA:6A:EE:EC:15:13:9C:19:9C:48:39:BA:7C:2F:65:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9d:80:47:a4:79:1a:e4:34:c2:fc:81:53:38:2f:f8:e4:97:
6e:c0:46:9c:ea:d4:f1:32:4f:b0:3b:1c:68:a5:12:96:11:f2:
e9:ee:2e:7c:62:17:05:0d:bd:8e:24:6f:0e:dd:ce:9b:06:c0:
d2:79:2b:09:17:82:dc:fa:23:51:4c:fd:af:c4:9b:67:a7:2f:
1f:f9:34:6b:af:d4:ed:1e:3b:ab:7f:bc:f5:32:39:ca:98:6f:
e3:4d:f2:09:00:71:c0:ba:a0:24:b3:cf:15:3c:f8:8b:a5:10:
af:e7:f1:1a:b1:10:36:05:0d:6c:ee:ee:6a:6c:67:b9:7b:91:
09:3b:4e:6d:be:85:1d:8b:cd:df:12:2c:23:b2:b1:8f:cc:ca:
a3:d5:47:88:e1:20:15:e4:9e:df:b9:46:45:1d:31:6d:25:04:
34:ed:98:f3:42:66:d1:bd:24:90:0f:7d:e2:ac:2f:fc:f7:d0:
60:81:08:d7:e0:fa:ce:0c:5e:c6:3a:c2:c7:66:e7:44:1e:77:
fe:a8:73:fd:6b:56:b6:1a:06:31:c6:db:4e:34:d0:48:de:a4:
4a:31:80:00:83:1c:75:d1:4d:ec:7c:34:ae:f4:7c:04:5e:8e:
31:a4:e4:d0:d9:cd:e4:53:94:dd:f6:50:0e:fb:dc:a0:46:0e:
03:de:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:55:41 2025 by rpki-client