Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa
File: 5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa (raw, json)
Hash identifier: E++9tDY+6MJcGR1ckqPMJP4GvLdmi6Bae7bwjk1+1II=
Subject key identifier: D8:61:F2:AF:CB:A5:EB:37:05:CA:6E:0A:33:E0:C0:6E:CE:1A:4F:21
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848164F86DDFAF7F166B4D16320
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa
Signing time: Tue 03 Dec 2024 19:54:54 +0000
ROA not before: Tue 03 Dec 2024 19:54:54 +0000
ROA not after: Mon 03 Mar 2025 19:54:54 +0000
asID: 7029
IP address blocks: 98.17.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:16:4f:86:dd:fa:f7:f1:66:b4:d1:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 3 19:54:54 2024 GMT
Not After : Mar 3 19:54:54 2025 GMT
Subject: CN=ed61b23a-674e-4bf7-9076-e53b1d5ab064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:98:52:1e:d0:9c:27:29:93:74:a3:d3:27:
ad:13:24:fb:37:81:84:6a:76:3d:2c:d1:5e:74:a4:
93:46:ca:81:99:a9:44:0a:32:1f:96:2c:f1:61:c0:
07:4f:3e:73:97:ce:66:d2:52:9f:f3:4e:00:3d:42:
34:da:63:41:15:ea:8f:d3:a2:66:d3:ff:fd:8a:e0:
d0:36:18:4d:e1:f1:72:3e:5d:3d:d9:78:13:52:72:
45:a7:47:b7:5b:39:47:49:f7:da:c0:8d:35:4b:1c:
7c:58:5e:76:6f:c7:ca:34:17:18:a9:e0:ac:c3:82:
9e:84:19:b5:1e:36:d5:55:5c:75:4b:a4:d2:57:22:
e5:03:20:a2:4c:04:de:c0:11:da:84:93:59:6b:05:
ab:c7:04:21:6e:b7:27:cf:0b:ce:29:f5:8c:ec:00:
18:d6:ce:c7:5a:3a:b7:da:25:b5:d0:31:37:2e:72:
2b:c5:3e:0a:9d:e7:bc:aa:f7:9a:66:2a:c4:ea:6f:
bd:61:68:0a:c6:88:fe:75:57:e3:ad:e1:81:bb:81:
df:e1:a3:f5:70:44:f5:33:a2:0d:ba:68:e8:20:50:
2a:be:bc:15:d0:87:a4:9f:28:8b:8b:79:7c:d4:db:
1b:37:97:af:1b:fd:e5:ea:f9:de:e2:78:81:1d:55:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:F2:AF:CB:A5:EB:37:05:CA:6E:0A:33:E0:C0:6E:CE:1A:4F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:e0:12:7e:2c:38:30:a3:e1:5e:b9:d4:b7:18:22:d7:66:7f:
ab:db:19:64:e8:d7:a6:0f:b2:fc:d7:d5:c1:1f:aa:5a:33:ce:
fc:08:21:4b:64:99:3f:44:61:49:51:6e:a4:87:ff:2f:4d:39:
81:6e:2d:05:bb:53:ec:1a:b1:d4:9b:99:2c:a7:84:26:d5:b7:
57:a9:d7:25:2b:09:d3:ab:9f:27:75:67:fa:36:3f:e3:9f:3e:
97:23:ca:cb:4b:f9:83:11:df:cb:23:cf:68:08:f1:48:62:38:
3c:9a:9f:e8:fb:49:b8:5a:61:b9:51:20:3d:2d:d5:24:51:0c:
17:60:2d:f3:da:fa:3d:6b:3a:b2:96:e7:0d:66:53:02:5c:eb:
fe:2b:5d:3c:20:ae:6c:4f:a9:fe:42:a0:16:02:90:2c:70:33:
2e:bb:df:d3:d6:bc:1d:b5:56:8f:ee:b5:16:65:7e:a2:46:1a:
b1:1e:ca:ec:e0:de:74:27:f1:c7:53:db:e0:61:4a:76:93:97:
00:ee:56:57:ef:19:75:e1:8d:5a:8f:48:2a:ca:7c:46:d7:dd:
53:05:94:fc:f8:1e:ab:9e:78:63:3c:66:bb:ab:76:5d:06:76:
c6:53:7d:9e:71:23:69:7d:a9:e1:02:3e:f3:ad:c0:c7:7f:b1:
cb:8e:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:56:20 2025 by rpki-client