Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
File: 40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json)
Hash identifier: D/xK4oh5QPDCm04R7uAW6kYbI/R9madGv7cIJXKVvkU=
Subject key identifier: B1:AC:36:A7:26:EC:E2:52:63:EB:32:20:71:F1:03:1B:05:25:75:E0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858482F92003353E6EEBF4FD3FD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
Signing time: Thu 12 Dec 2024 21:04:03 +0000
ROA not before: Thu 12 Dec 2024 21:04:03 +0000
ROA not after: Wed 12 Mar 2025 20:04:03 +0000
asID: 7029
IP address blocks: 98.20.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2f:92:00:33:53:e6:ee:bf:4f:d3:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 12 21:04:03 2024 GMT
Not After : Mar 12 20:04:03 2025 GMT
Subject: CN=9a59a4c1-6c9a-4722-936a-7b26cc401486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:f6:d9:66:a8:51:d0:7e:de:60:b4:54:e8:
07:77:88:3c:60:69:39:f6:f8:81:aa:b3:b0:62:ab:
48:c9:3b:4f:8a:ec:3a:5a:ce:6f:47:e5:11:fa:3d:
b9:3c:c0:13:ad:41:01:7d:bf:2d:8d:89:ee:32:e9:
02:03:28:30:22:0f:75:41:76:40:3c:a9:7c:f7:7a:
53:c5:72:6f:39:54:af:75:18:54:66:65:6d:15:a2:
5b:fc:20:53:49:f9:48:f6:ce:c2:c6:48:81:f1:9b:
37:67:f2:94:63:5e:9c:c4:26:92:1a:8c:5f:5b:c7:
d5:20:15:fc:98:e1:8c:01:6c:5a:f1:eb:96:7c:36:
17:1f:12:18:d3:11:d2:19:38:55:05:aa:84:02:2c:
79:08:10:70:2b:27:91:35:6a:22:28:de:bc:24:68:
8d:09:a2:78:36:4d:4f:60:9d:aa:a7:79:01:76:88:
e4:6c:1e:28:d5:e1:94:ef:58:a4:ba:f2:c0:ee:ff:
d2:02:f9:3a:0a:89:a8:66:94:b2:ce:e4:da:ea:c5:
71:9b:64:ca:a2:bf:fc:ae:68:39:4e:24:07:42:84:
0d:fe:ba:d2:2f:b4:ce:19:c5:67:32:ee:15:16:e7:
5f:71:ee:a7:18:21:92:4f:57:f1:87:27:7a:ca:8e:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:36:A7:26:EC:E2:52:63:EB:32:20:71:F1:03:1B:05:25:75:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9f:ca:65:2d:a6:89:8e:5d:d0:0d:33:5f:45:b0:f9:a7:cb:
52:26:19:6d:67:fc:cf:d5:c0:3a:a0:22:5e:b2:9b:15:13:37:
14:e5:7f:90:b3:2e:e6:3d:4f:5b:7e:d2:29:26:fa:51:da:58:
8b:11:14:8c:82:02:4e:71:fd:93:6c:f3:57:04:9b:44:d8:53:
80:3e:81:62:1a:c8:2a:d6:12:9a:5c:dd:a5:f5:14:99:9b:9a:
39:15:0c:82:5b:45:39:65:83:19:9a:35:f1:03:66:9e:ed:0d:
9c:d2:40:96:b8:89:71:87:02:35:04:07:5b:9a:28:e0:4b:d0:
60:79:5c:19:b5:37:ca:3a:7e:62:a2:95:12:9b:f8:5f:23:c5:
dd:1c:42:51:1f:b0:ce:66:5e:4e:27:ea:73:cc:98:f6:72:09:
81:65:9c:2b:5e:de:cd:fd:52:35:f4:cf:02:72:b3:4a:eb:c2:
0a:fd:22:e0:1c:7e:79:36:21:1e:0e:4c:1f:81:17:e5:9d:9d:
ca:f8:36:c3:56:d5:1c:67:68:ad:9c:49:68:97:25:e1:5f:dc:
f0:4c:0e:9b:0a:99:39:0f:6c:06:ab:bd:eb:ba:66:5d:fa:ea:
e2:22:3e:a7:81:41:4e:1b:e5:87:76:a2:db:02:e2:59:97:5e:
55:fc:30:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgvkgAzU+buv0/T/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIxMjIxMDQwM1oXDTI1MDMxMjIwMDQwM1owLzEtMCsGA1UEAxMk
OWE1OWE0YzEtNmM5YS00NzIyLTkzNmEtN2IyNmNjNDAxNDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQH22WaoUdB+3mC0VOgHd4g8YGk59viBqrOw
YqtIyTtPiuw6Ws5vR+UR+j25PMATrUEBfb8tjYnuMukCAygwIg91QXZAPKl893pT
xXJvOVSvdRhUZmVtFaJb/CBTSflI9s7CxkiB8Zs3Z/KUY16cxCaSGoxfW8fVIBX8
mOGMAWxa8euWfDYXHxIY0xHSGThVBaqEAix5CBBwKyeRNWoiKN68JGiNCaJ4Nk1P
YJ2qp3kBdojkbB4o1eGU71ikuvLA7v/SAvk6ComoZpSyzuTa6sVxm2TKor/8rmg5
TiQHQoQN/rrSL7TOGcVnMu4VFudfce6nGCGST1fxhyd6yo6MWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGsNqcm7OJSY+syIHHxAxsFJXXgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBlMGIzMWUtMDFmMi0z
MTdmLWE4ZDAtNzdjZTkyN2EyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAafymUtpomOXdANM19FsPmny1ImGW1n/M/VwDqgIl6ymxUTNxTlf5Cz
LuY9T1t+0ikm+lHaWIsRFIyCAk5x/ZNs81cEm0TYU4A+gWIayCrWEppc3aX1FJmb
mjkVDIJbRTllgxmaNfEDZp7tDZzSQJa4iXGHAjUEB1uaKOBL0GB5XBm1N8o6fmKi
lRKb+F8jxd0cQlEfsM5mXk4n6nPMmPZyCYFlnCte3s39UjX0zwJys0rrwgr9IuAc
fnk2IR4OTB+BF+Wdncr4NsNW1RxnaK2cSWiXJeFf3PBMDpsKmTkPbAarveu6Zl36
6uIiPqeBQU4b5Yd2otsC4lmXXlX8MMA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:53 2025 by rpki-client