Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa
File: 4814a9e0-3358-3815-8a3b-85e799e84ee3.roa (raw, json)
Hash identifier: W6ZqXRRr7d8yjBU7NTF4ndD0bST+cCkYCwqY8tmsQ/M=
Subject key identifier: 6B:76:F4:C5:A5:88:7A:E5:30:91:26:9B:E2:F1:3E:7D:12:A9:53:DA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B3E964BB378EA8271C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 98.16.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b3:e9:64:bb:37:8e:a8:27:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=732c492d-e307-493d-823f-1ccc8d1b2908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:be:0b:e7:26:bc:1e:01:57:e4:17:a7:da:
56:8e:dd:95:5d:54:41:35:b7:73:3a:28:6d:a1:2d:
5c:8a:1a:cb:96:ec:1c:bc:63:cb:35:8a:e2:a1:eb:
ec:32:bb:9a:ff:f6:7a:f1:3b:61:50:47:e5:bd:2f:
7f:df:4c:ec:35:05:23:f4:c7:4d:31:be:46:42:fe:
0e:49:7d:1f:76:8c:ec:57:22:be:5f:34:bc:ab:bf:
6f:ae:4a:51:e0:d6:d0:4e:01:f8:55:c1:a9:af:7e:
ec:6e:5b:01:df:e1:77:5d:2e:1a:e6:62:e0:8e:33:
16:70:23:c7:4c:ba:67:6f:40:43:a8:3e:37:9a:cc:
c8:ee:5a:ca:1e:84:be:08:90:40:b0:1a:c0:cc:6b:
a0:2e:c1:83:99:b6:01:fc:be:71:08:eb:74:9f:75:
65:e9:32:e1:1c:68:06:13:13:ea:ab:3c:51:ef:c6:
53:61:28:5e:15:e8:26:e7:a1:6a:b2:88:53:98:9b:
33:47:4c:9b:8d:90:ba:08:7d:b2:78:f9:cf:5e:d2:
62:4f:ff:d1:9f:c8:25:6b:33:1a:5b:29:ac:0d:be:
dc:7f:49:96:c8:34:d7:dd:ad:8c:04:2a:03:b7:0d:
ad:b7:75:31:74:70:24:47:c8:81:39:c1:13:c5:fd:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:F4:C5:A5:88:7A:E5:30:91:26:9B:E2:F1:3E:7D:12:A9:53:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:37:c9:9d:85:2d:75:a7:0f:52:eb:88:8e:cd:be:f8:a7:1e:
12:6b:37:fe:30:ee:73:84:63:8c:26:31:5b:74:c9:5f:c0:4a:
bc:39:f4:98:c0:0e:36:1a:9e:46:58:72:3d:3d:d5:8a:e1:35:
49:b2:2a:d0:c8:12:50:93:25:44:4d:ee:21:c8:8c:f0:ac:4a:
ea:13:77:14:e8:83:0a:8a:ed:6f:25:2d:d5:4b:82:00:15:4e:
4c:bf:b3:76:66:45:e3:70:9b:2c:ad:d2:94:8b:a5:30:c0:be:
ef:f5:9c:a6:73:24:7a:92:a5:b7:89:28:95:b4:cd:2f:f6:6d:
c4:53:56:11:aa:48:f3:3c:00:30:4a:bd:fe:50:0e:09:c7:3d:
33:0c:fd:42:41:72:6f:05:7d:5e:8d:89:54:97:d8:42:1d:4b:
9c:34:ed:53:bc:e1:88:60:85:fc:95:0a:02:ef:e8:99:7b:f5:
5b:6a:45:85:c8:54:77:44:ad:68:d2:3c:58:d9:34:ac:38:cb:
58:2e:1b:6a:ed:e1:c3:dc:93:45:bf:ed:66:90:47:54:73:a5:
30:4f:d3:8e:79:c7:00:12:76:fc:ab:b9:72:3a:9b:08:bc:99:
84:c4:7e:c9:ef:66:47:93:2f:e5:bc:11:42:70:a6:7c:90:a8:
61:d5:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:59:04 2025 by rpki-client