Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa
File: 4c5f2c02-022b-371a-8966-9ae694c3b539.roa (raw, json)
Hash identifier: BFLlNEZaPPNI/+m8gBsMH0mmg2FwxIlAv2iK8u/i25M=
Subject key identifier: 2D:B6:8A:C6:37:48:CA:A1:02:CC:CB:EC:0C:03:44:59:88:54:A2:4C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B47D6B4B44DC82F7BC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 98.20.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b4:7d:6b:4b:44:dc:82:f7:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=3482ae6b-c396-4f80-a0dd-2b76648d1bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:ce:a9:49:c8:dc:42:e2:37:91:90:8b:f3:
40:4b:fd:0d:72:7d:fa:64:0e:cc:00:c9:c3:34:fb:
39:a1:76:84:e2:be:16:72:29:de:88:e5:1e:a9:8a:
7f:08:05:92:50:61:43:0e:52:97:23:c1:c6:21:63:
ee:1c:c7:d5:f1:ea:0d:ae:81:8a:b1:3a:fb:c6:80:
79:b2:79:d3:36:16:81:d6:30:9f:40:89:23:5b:81:
73:71:47:06:b6:44:c7:50:aa:0c:04:c2:59:8e:9d:
00:11:96:51:fc:f8:b1:19:43:e4:8c:0f:cc:b3:2f:
db:5f:9b:d1:f1:7e:f1:c3:06:b7:72:bb:99:d8:1d:
be:bb:a8:8b:b1:21:98:b1:1d:d4:2a:c5:40:95:d7:
8b:cc:c3:49:0c:7a:02:eb:6e:32:80:9c:09:f5:fd:
59:63:af:c5:97:ae:5c:63:11:68:78:47:89:eb:40:
82:9d:2d:ad:6a:34:94:1f:11:51:51:88:0c:0a:c9:
e8:47:fe:5c:27:75:b5:a0:81:d4:84:e6:4f:83:e0:
55:1d:fa:ef:00:68:c4:17:5c:55:c7:86:12:4a:16:
0a:97:53:87:16:9d:16:66:b6:68:37:43:08:03:be:
12:cd:2e:af:11:7e:34:2c:77:94:77:cf:64:ac:78:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:8A:C6:37:48:CA:A1:02:CC:CB:EC:0C:03:44:59:88:54:A2:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e4:eb:4a:72:89:ce:78:3a:af:d0:80:48:4c:28:54:21:ca:
80:00:f6:d9:46:92:ec:82:d7:64:b7:fb:76:c0:43:a0:ec:01:
22:41:14:27:d5:74:74:be:ba:8b:29:ac:1c:62:6a:c2:c2:8f:
c6:7d:56:d5:56:74:07:5e:c3:26:50:e6:86:40:f8:dd:14:09:
1d:96:54:c2:e6:0b:6a:c6:b5:ad:34:5f:c4:f5:06:58:71:2d:
dd:6e:e6:93:eb:36:d3:ae:6b:80:b1:b7:86:ed:f0:a6:03:3d:
c4:e2:5a:9c:7a:ca:ca:b5:67:76:2f:14:45:78:7d:e4:d0:f6:
b0:e2:23:cf:08:a4:1d:7a:65:a8:6d:81:3a:d0:19:aa:b0:81:
9c:97:e2:f8:b4:d8:ad:2a:56:a1:16:e9:a8:2d:97:a6:5c:51:
a9:9a:c5:d8:f3:0a:3e:0e:f6:22:9e:dd:13:4c:3c:b8:28:1e:
d7:9e:34:be:d1:c4:52:11:8a:6f:e6:aa:36:89:e2:b9:5b:aa:
a3:a5:91:45:73:51:07:0a:20:8e:10:e8:d0:b8:0a:b2:80:e8:
15:4b:db:af:a9:dc:77:49:e1:3a:c1:61:b0:a7:8b:5c:65:7e:
1f:5e:9a:00:57:ea:f4:7b:f7:3f:47:43:27:42:99:9d:62:46:
76:69:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:59 2025 by rpki-client