Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa
File: 2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa (raw, json)
Hash identifier: PH0y09vEEA3jW8xtYpqNgLnYv2PkQ5AUDXI6vs3Qtns=
Subject key identifier: 95:AF:CC:A7:30:4A:18:68:2E:03:88:50:A8:08:DB:27:76:6F:74:40
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155016293ED0D8E5C4F6900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.23.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:01:62:93:ed:0d:8e:5c:4f:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=70bfb188-d9ee-456e-acfa-11e016a87715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:df:0c:5f:18:ef:17:a7:ba:b3:8b:ba:33:
41:73:ac:af:76:4a:17:81:59:25:74:62:c1:bc:1b:
8d:ba:38:55:df:ae:b6:b1:65:05:c3:0b:bb:86:b1:
7f:03:b7:1e:08:34:7b:97:d1:62:6b:b7:e6:dc:d0:
16:97:03:fc:a0:48:4b:6e:bb:68:ec:3f:67:e9:d2:
7a:07:0e:69:79:5e:af:fa:51:ec:1d:3f:37:92:77:
5b:cb:2f:05:a4:49:3f:f5:e7:c3:a0:91:7f:33:9a:
9a:38:42:5d:78:d0:cc:f0:f0:7b:93:e8:26:b7:7b:
b8:cb:c8:ea:38:23:9b:15:af:b8:ad:92:25:4a:92:
9e:31:9d:b9:6a:51:07:d2:d3:47:31:71:6a:bc:b4:
2e:24:04:3b:95:f9:42:a0:69:0e:1f:85:ca:1d:05:
64:8b:fc:38:6a:75:19:33:22:f2:8c:28:4a:c0:85:
7e:b1:a0:79:22:db:87:05:46:3e:0a:8d:43:4f:11:
f0:c1:c0:9b:c8:df:f0:d7:54:62:13:23:8b:58:9d:
ad:ca:3e:79:f2:d6:fa:a8:a9:1f:3a:e2:24:61:96:
3b:dd:ee:c2:10:63:58:82:1f:03:84:92:77:be:e9:
7e:c2:bc:64:e9:2f:a5:7c:64:1c:49:11:72:02:13:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:CC:A7:30:4A:18:68:2E:03:88:50:A8:08:DB:27:76:6F:74:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:9f:3a:d5:29:3f:c7:55:a2:96:67:b7:57:47:ad:da:3a:68:
1d:10:e6:ee:1d:ab:21:40:67:01:84:0f:3d:b8:df:4c:ad:5f:
ae:1a:2d:c6:81:98:b1:65:0b:44:21:12:32:0c:39:d6:13:b9:
ea:c9:46:51:2e:45:ea:a3:dc:e5:15:65:c3:e2:4f:67:b4:2e:
72:93:99:c9:db:62:54:b6:95:70:15:0b:1a:e9:00:59:dc:2e:
3b:28:ee:d6:78:9e:4b:18:ea:85:82:f1:04:8d:8d:31:f2:bd:
a8:85:e3:3e:df:2a:6a:89:11:3c:1b:04:5c:9e:59:ca:dc:b9:
5b:9d:b3:84:ae:27:f3:2d:e0:b3:5b:08:b8:4c:7b:2f:1a:1c:
65:06:6c:18:fb:59:27:eb:e0:6d:40:66:6d:0b:fe:c3:22:4f:
8c:ca:51:c2:06:61:52:6e:65:3a:9d:fe:0a:a4:80:4a:08:84:
c8:37:df:dd:91:c4:db:f4:92:af:9a:40:d1:58:49:1e:df:0f:
c7:29:40:d9:fd:05:1c:26:55:82:bc:e8:f1:51:c2:92:69:b8:
44:b4:9b:53:23:d0:de:ad:ae:06:d2:5d:e7:f7:f6:5b:97:f0:
5a:b1:fa:10:3c:2d:c3:8f:12:46:5b:99:c2:16:b0:0d:a4:d6:
18:68:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:08 2025 by rpki-client