Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa
File: 2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa (raw, json)
Hash identifier: K4hdPbN8+y3qX9+pF1dqaMQbjLpe7j46yRKbmG2PyCQ=
Subject key identifier: E2:DC:5C:9F:03:38:EE:5A:78:2D:76:54:7D:8D:2A:DE:8D:C0:EC:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858482F8CB1C2BE903E4E1FCDC268
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa
Signing time: Thu 12 Dec 2024 20:53:22 +0000
ROA not before: Thu 12 Dec 2024 20:53:22 +0000
ROA not after: Wed 12 Mar 2025 19:53:22 +0000
asID: 7029
IP address blocks: 98.20.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2f:8c:b1:c2:be:90:3e:4e:1f:cd:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 12 20:53:22 2024 GMT
Not After : Mar 12 19:53:22 2025 GMT
Subject: CN=a0eda0c2-a702-498d-90d5-7e2a02f5a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:29:e2:1b:8b:d8:5b:5c:3a:03:21:9f:4f:
8a:e9:ac:c1:2d:8e:3f:7e:31:87:2a:12:1a:33:af:
2b:56:75:23:38:dc:77:b8:dc:f8:11:64:18:ae:cb:
59:6c:23:f1:c7:9b:fa:2c:79:76:5e:fb:51:45:e6:
8b:55:be:c2:99:d6:ab:83:ea:36:6c:03:a4:d0:06:
39:6c:fd:94:b6:14:59:65:c4:cd:2d:ef:48:02:94:
a2:8f:5d:23:b4:28:d0:ef:97:b3:3d:aa:5a:35:e4:
1e:62:38:c5:e2:b5:07:64:ed:00:ff:a7:e5:37:0e:
40:1a:9f:cb:69:88:aa:67:92:7c:5b:c9:c3:ea:fb:
af:4a:23:6a:47:40:43:73:48:34:af:a1:fd:06:69:
f2:69:4c:c9:26:c2:ea:4b:61:ab:05:8f:28:33:da:
0b:e2:6f:bf:96:57:a0:1c:57:49:ea:4e:6e:a6:79:
c7:b2:c9:78:c2:8c:8f:be:43:6b:29:1e:36:e2:e7:
b8:66:c8:dc:43:fa:87:8a:64:9c:20:a9:6c:e2:9e:
3f:9d:ba:75:0d:f6:f7:64:a8:5c:ee:05:bf:69:b3:
b3:0e:29:f6:a0:b4:c6:36:71:24:71:9f:9f:51:bc:
d5:b7:39:58:31:5c:4f:7d:d3:17:21:e4:e2:08:c6:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:5C:9F:03:38:EE:5A:78:2D:76:54:7D:8D:2A:DE:8D:C0:EC:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ff:09:a4:92:15:aa:f6:07:f8:84:16:09:10:c7:18:0b:dc:
1b:3b:d8:cf:c6:e4:80:80:e1:ea:8c:8f:70:31:30:d7:90:1e:
4a:4a:ef:4f:13:63:81:fb:1a:da:a1:98:da:81:45:0d:5c:0b:
68:ef:2e:bb:3e:47:51:ed:06:1f:08:dd:6f:be:6a:02:73:da:
4f:62:88:43:77:7d:9f:5a:07:1a:4f:1f:b2:f6:b1:2d:9b:71:
7f:31:da:3b:26:50:61:d4:4a:70:9f:4e:3a:f6:d9:58:53:73:
8c:29:78:cf:b0:c0:ee:fd:c1:f9:9f:29:4a:c9:9a:dc:3f:94:
e8:a0:a7:fd:e4:d3:a5:61:87:97:fe:d9:41:a7:15:2f:57:ae:
4f:f4:af:d0:30:e3:21:d6:52:95:55:94:18:f0:70:13:2e:13:
72:30:68:f9:07:7e:5b:35:23:be:30:b9:c3:8e:54:0c:0f:3d:
14:b8:ad:77:06:02:10:78:3c:be:aa:92:64:af:63:4d:3d:e1:
10:a0:bc:fc:68:d6:3e:76:12:d0:0b:d6:cb:64:0e:46:46:89:
53:52:95:91:45:51:26:33:69:59:df:f9:40:ae:2b:43:26:ed:
b6:2a:58:48:88:1f:98:24:85:ac:0b:54:ee:b0:b9:c7:b5:89:
85:a1:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:30 2025 by rpki-client