Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa
File: 2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa (raw, json)
Hash identifier: vsO0xTTTOQfJrAEcb0wDakRHyvBRxhHvxDcgsi3tJaI=
Subject key identifier: BF:FF:BD:41:8B:1A:6D:D8:0D:A4:3F:E1:DB:A2:AC:87:1A:FE:6D:37
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB576874FE689490C273580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 98.19.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:76:87:4f:e6:89:49:0c:27:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=43327df7-b82c-4497-89c6-45f2ed1c0359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:22:03:dc:67:76:a9:3a:81:ee:48:b2:42:
75:73:f9:8c:a2:07:21:a1:93:9c:67:ef:8f:30:9d:
ac:be:d8:ff:d8:8d:46:4b:e9:e4:99:0d:7a:5b:50:
06:8a:b9:5a:e5:5f:a8:63:88:b8:38:1b:f1:e0:02:
29:12:47:74:36:d7:7c:17:64:3f:86:41:5b:ba:cb:
65:6b:77:89:93:e2:1f:ae:98:a9:34:55:30:09:a0:
8a:57:a7:6b:99:d3:d5:9e:15:4c:fe:3b:52:05:18:
96:37:bf:17:f7:80:ea:2f:15:57:e9:77:e7:1d:8c:
0e:d7:09:3f:6b:cc:38:a3:13:3d:e0:29:95:ac:70:
14:4f:94:30:6e:cf:6a:05:83:d1:b2:6b:fd:55:98:
d5:f0:72:26:1a:26:c8:36:6d:81:f4:c7:a3:89:bb:
a9:be:d0:c5:e2:85:f9:2c:80:62:38:25:26:0b:68:
c9:36:f0:f1:ce:94:b8:60:f2:ab:92:00:52:31:a4:
b1:f6:8e:32:46:9a:22:4b:5c:04:5d:3f:e1:cb:b2:
e3:72:b1:52:e1:ca:1c:16:bd:0e:f2:79:c8:ed:df:
7f:77:a9:03:92:9b:41:a1:7a:bb:f8:88:73:1e:9d:
ff:6e:b7:16:c5:60:9d:0f:4a:d4:57:cd:f9:62:52:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:BD:41:8B:1A:6D:D8:0D:A4:3F:E1:DB:A2:AC:87:1A:FE:6D:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ec:66:d9:73:11:ba:52:13:33:9b:df:dd:66:ac:ea:ad:76:
6d:71:d7:ce:e5:3b:32:29:42:0c:b3:58:7b:f0:e8:b2:f0:f1:
dd:2d:a4:70:03:b4:11:a3:a7:9f:79:98:07:26:89:9f:59:0d:
c1:39:6e:c1:e1:68:10:99:ea:e6:26:49:db:21:ac:29:12:95:
0b:a5:fd:10:99:25:42:26:25:a4:a3:88:f9:9d:82:b8:c0:e8:
84:e2:5d:20:80:fe:e7:0c:5c:8f:ec:c8:77:e0:74:47:da:e1:
c2:30:32:29:d9:71:dd:2a:ca:a5:eb:9a:7b:3a:fc:92:48:94:
3a:56:61:7c:81:b9:ad:39:7e:72:1f:f0:dc:59:ce:c8:1a:24:
bf:18:82:3f:00:76:c2:68:66:c4:e7:2f:2b:b2:c9:7a:b0:5c:
98:97:3a:d1:c1:19:d4:68:65:3c:15:54:9e:75:e3:ea:b1:4f:
77:42:f2:48:00:a7:2d:86:67:09:16:6f:94:5f:74:cb:9c:e8:
84:98:b5:ff:10:46:83:00:5e:c3:fa:2a:54:7d:25:f3:e1:86:
0f:80:b9:38:50:4a:8f:61:8d:bb:35:fa:6a:40:39:a3:aa:cd:
31:4b:45:ac:7a:f1:e7:44:43:61:a9:9d:bc:64:08:89:49:e8:
02:72:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:03:02 2025 by rpki-client