Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa
File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json)
Hash identifier: Y0hys7I8wiOiE8iDdd1nG3GpLjtvh3eJGh98EZDm93Y=
Subject key identifier: AC:73:E1:77:A7:95:0F:89:C9:3D:F6:1B:5C:C0:34:7B:A1:B3:8C:0F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A39979F1AECC7C3685800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 98.20.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:39:97:9f:1a:ec:c7:c3:68:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=b2807a6e-bc5e-4d2b-9b5a-8ffcad277afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:04:3a:dc:7a:8b:17:25:76:f1:8f:ec:95:
36:43:10:91:1b:18:f9:3f:ae:18:48:6c:ce:b0:55:
cf:d5:b9:31:26:10:af:a1:bf:07:48:e2:0d:70:74:
4c:80:9d:8d:93:e9:39:b9:b7:44:c4:b0:77:a6:80:
9b:8a:cd:3d:f9:2d:2f:e7:3a:c9:c7:a9:6a:e7:96:
55:c9:9e:3a:46:bc:22:d6:2b:77:1b:e2:63:01:58:
01:40:b3:78:93:81:ba:33:87:fc:76:b5:a9:fd:62:
00:16:e0:bd:cd:a4:5a:16:46:e5:4a:7a:50:e3:d8:
09:eb:b7:25:fa:a9:d7:80:4b:b3:3a:7a:91:08:e7:
68:8d:40:22:8b:0c:ce:ce:e4:33:24:b8:d9:3a:60:
2d:b5:b0:54:d5:96:c9:1b:3c:c8:88:77:96:63:b0:
63:2f:f9:86:bc:2c:b4:49:64:92:02:98:96:00:7c:
c8:06:1b:89:44:fa:8e:f8:e4:c2:28:64:e2:14:a4:
1a:b0:ea:f8:58:39:38:6e:2f:b7:ca:d0:1d:4f:cd:
4b:15:9c:98:5f:2b:f0:95:40:c9:47:97:6a:76:bd:
ea:60:03:0d:e2:78:65:2d:72:f9:02:4c:98:21:29:
a8:ec:01:db:e2:1d:62:1f:81:f1:b6:21:55:9d:5c:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:E1:77:A7:95:0F:89:C9:3D:F6:1B:5C:C0:34:7B:A1:B3:8C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0a:5b:6a:ce:11:25:b1:15:12:19:7a:68:ca:d1:5f:ac:60:
65:58:97:96:5b:66:70:83:7b:f9:61:e8:3f:d8:5b:97:bf:af:
20:4d:bc:63:e3:9d:06:da:8a:43:20:90:6b:b1:12:29:10:a2:
c0:f5:c2:6d:41:35:b2:f6:d6:5b:9d:7a:1a:a0:de:e4:48:d0:
bf:f6:a1:76:d7:d8:99:66:04:2d:18:bd:0d:8a:35:5b:c9:66:
d3:88:fa:1c:2b:20:1a:96:b1:10:73:87:55:65:d9:81:d2:c2:
f8:9b:8f:c7:ad:2e:cb:98:fd:8b:7a:2a:de:4d:65:b7:d7:ee:
14:6c:1a:fa:c4:ec:09:47:0e:83:e1:f7:59:37:89:e3:d7:f3:
f8:ca:73:0f:4c:51:9e:37:5d:a0:38:ea:60:74:81:dd:54:d4:
4e:46:02:01:c4:0a:02:9b:ef:b6:f0:20:b7:4e:ee:95:07:cc:
02:c9:ff:60:51:0a:b8:cd:a6:5d:65:f9:af:38:03:fb:d7:d3:
d3:02:cb:3b:93:11:c5:67:85:87:2d:d2:81:71:b5:d5:d3:0b:
22:ad:ee:8f:33:15:e3:8e:91:39:9b:09:07:f9:44:3c:e5:79:
1b:e9:85:7a:b7:32:83:6d:1d:a8:da:a8:19:26:99:ff:74:0d:
66:ff:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:40 2025 by rpki-client