Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa
File: 5125e331-f265-3594-a49c-f30257eea820.roa (raw, json)
Hash identifier: 2VlDKLqlvTTunABJ3ig9v1409m32jhgOyPkwB0gYa6U=
Subject key identifier: 3D:48:C7:5F:4B:BD:F0:61:40:DC:09:50:C5:EE:09:4C:03:B0:C9:56
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15500FCA9691E02F2C3A4C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.21.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:00:fc:a9:69:1e:02:f2:c3:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=561b7229-8103-4013-81b8-6fa7d4ec86fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:c6:76:8b:0d:d7:5c:44:dd:b7:bc:4c:52:
36:34:f5:f6:a4:ff:53:31:9e:81:6b:22:0e:d9:a9:
99:3a:ac:f7:04:2b:53:27:f8:ea:84:16:ac:30:fe:
9e:df:4a:82:d5:8f:0f:20:31:d5:1b:f8:ff:15:80:
e3:ad:4e:78:8e:77:8b:83:79:77:f3:b2:08:67:9b:
04:46:1b:36:b3:b0:07:88:68:fc:5e:13:39:0e:4c:
42:e2:bb:17:86:df:56:16:33:7f:cd:d0:4b:5a:95:
bd:34:39:ea:5a:d6:6e:4e:2a:b0:0d:90:e1:47:d1:
e7:41:ac:26:68:b3:d4:34:cb:67:91:27:9e:bb:74:
bd:43:27:aa:28:d3:5c:28:b2:ec:34:70:00:04:6b:
e0:98:d8:a6:95:ca:37:10:30:42:ec:a1:11:0b:4c:
64:ba:e0:0d:9a:6e:c3:22:84:6b:89:4c:34:e3:77:
fd:ed:6c:60:83:31:e8:61:dd:6e:e8:65:b7:cf:76:
b3:0a:05:ed:13:f5:6a:73:89:9a:25:af:35:5c:48:
d5:cb:67:ec:ce:49:eb:57:26:ea:be:4e:6a:45:91:
0b:07:ce:02:92:a9:17:71:78:33:a5:c2:da:7f:71:
44:d0:a3:ff:06:14:1f:8f:9a:73:aa:42:54:ae:bd:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:48:C7:5F:4B:BD:F0:61:40:DC:09:50:C5:EE:09:4C:03:B0:C9:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:9b:17:e1:4c:f3:5d:a3:e2:01:79:3c:b5:10:7a:0e:8c:95:
20:e8:01:af:d6:a2:d0:ef:46:04:01:d2:0c:fc:b6:6c:2a:67:
f1:0a:11:0a:db:41:3b:d1:e3:bd:6c:13:20:53:42:22:1d:21:
ce:23:98:b7:b2:71:d0:63:6b:56:ab:f2:60:d4:4f:f5:f7:69:
23:6d:d9:73:4a:8f:d2:cb:0e:66:2c:27:bb:80:7f:6d:06:30:
b1:9c:2d:00:bc:fd:c9:d8:9f:9c:f9:0f:fb:09:f9:95:51:95:
43:c6:4e:cb:68:63:e5:04:c5:37:0d:47:e0:87:ec:2f:09:75:
22:cb:e5:17:af:51:45:77:5c:49:b8:9d:af:6f:22:81:15:2d:
0a:37:64:2e:cd:49:5c:96:e3:a1:5b:b4:bd:38:1e:b2:fa:00:
67:20:50:47:63:12:f8:65:3f:f1:af:0c:f2:b6:ea:bd:58:77:
6b:d5:2d:c3:e0:79:5c:8f:33:bd:a3:25:ef:5e:02:bd:02:ba:
f3:6a:44:dc:03:d4:24:34:e8:87:6e:36:11:a0:e3:78:d6:cc:
28:94:83:0f:a4:b6:5d:29:a3:d2:0f:49:9d:e3:82:7a:f6:17:
a4:bb:d2:84:22:fc:13:06:dc:06:2c:fc:93:7a:a4:c1:3d:33:
f7:b5:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:36 2025 by rpki-client