Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa
File: 29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa (raw, json)
Hash identifier: jLt3N9AQzgFPFnyzUrWJ+DLiZ0aHcT+/Bf8AETJSvIw=
Subject key identifier: 2A:45:FD:60:0F:75:74:0F:3C:09:3A:BF:CE:91:B4:88:A3:E4:32:6D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FFD38F8AC8B8A53B5794
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.18.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:ff:d3:8f:8a:c8:b8:a5:3b:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=5607d590-b594-493f-ad7c-0fac9c029f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:23:f3:f1:7a:2c:91:6a:bc:89:07:06:38:
f4:b9:89:c9:2d:2b:2b:17:a2:73:75:6f:27:e8:97:
08:47:40:f1:62:60:68:97:0b:5a:08:9d:a5:56:0d:
2b:07:9e:6d:57:fd:19:4e:60:da:68:be:ba:db:5c:
48:ec:72:1b:2e:f5:27:20:80:12:a4:92:b8:76:48:
bb:5e:1d:26:b5:78:74:dd:c3:35:72:f0:d6:2e:f6:
4b:7a:44:12:a2:ba:43:2c:0e:d3:53:a5:9e:07:e6:
9a:34:2f:51:0a:23:01:14:54:50:0e:ba:84:79:88:
95:15:7f:e7:60:16:b7:c9:00:0d:cb:c0:8c:bb:1b:
94:64:73:ee:02:31:b0:2f:4e:7f:de:fe:a9:38:ed:
51:25:6a:be:f4:fd:a5:a7:ff:51:1e:ab:88:26:92:
b7:23:c5:35:74:3f:91:df:c2:12:65:29:ef:f0:f5:
5d:12:94:a7:a2:31:84:14:78:d4:2f:d9:51:e8:c0:
62:31:83:22:47:00:99:8f:59:fa:1f:a3:0c:f3:ff:
d6:78:9a:39:07:71:74:4e:01:02:10:7d:5c:44:73:
6b:22:77:cc:66:7b:f3:64:17:f7:71:0d:b3:1a:68:
cf:d5:0c:a4:4a:05:34:5e:a9:1e:7d:48:5f:a4:6d:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:45:FD:60:0F:75:74:0F:3C:09:3A:BF:CE:91:B4:88:A3:E4:32:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:46:08:dc:90:86:6f:46:e2:75:70:bb:33:5e:a1:5a:20:38:
29:89:10:3e:e9:f2:4b:3f:bc:08:3b:bb:3a:90:9c:78:15:25:
f6:cd:38:be:9e:7e:01:45:cb:cd:8c:53:9c:d0:b0:a6:65:f5:
5a:56:21:f5:da:1b:35:22:1f:d7:5b:18:fc:bc:d3:30:02:15:
81:50:24:3e:01:bf:81:8e:ab:ce:dc:06:ee:33:de:ab:4d:65:
82:e6:67:ce:6e:18:33:f9:24:42:ca:45:9b:ef:14:cb:1a:1a:
ce:1f:9a:6b:9a:c8:21:e0:0d:c6:68:88:84:c7:56:be:3e:8a:
58:cb:c4:a5:0f:1b:40:d8:7d:00:0d:7e:79:58:7d:d1:a9:a6:
32:64:2a:b0:fb:2c:3d:1c:11:43:95:8e:9d:78:04:08:23:3d:
5d:87:fa:be:96:cb:2f:94:2e:ff:9d:f9:b7:ba:cd:f2:6d:10:
7e:aa:b3:94:da:a9:20:82:04:2d:d2:61:67:ef:33:06:28:0e:
61:79:63:e0:02:5b:8f:2a:a6:b2:b8:75:02:f3:69:7e:c7:a5:
ff:fe:00:9a:43:6a:15:7e:61:3f:4f:64:b9:0e:14:eb:84:07:
af:60:3f:d9:5c:d2:cd:f9:6f:a1:68:cc:bb:d0:b5:0d:f4:d0:
2e:70:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:42 2025 by rpki-client