Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b08af0f-0784-300b-90d5-d05ee869dc91.roa
File: 5b08af0f-0784-300b-90d5-d05ee869dc91.roa (raw, json)
Hash identifier: +reW7452sL+Dj1I+UksZ6LbzGl9/xayeh/viEOs38bc=
Subject key identifier: 3A:09:3D:6B:F5:7D:48:5A:C6:89:31:B9:93:56:FE:B0:AC:42:6C:3F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A3AD547DAA0D9A41D1B40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b08af0f-0784-300b-90d5-d05ee869dc91.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 98.19.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:3a:d5:47:da:a0:d9:a4:1d:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=32dffc09-4cb4-4c03-9cbd-301ca55e385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:ec:a2:88:f5:c5:95:4a:70:f5:26:53:ab:
d8:be:9f:05:39:90:f3:f2:72:14:b9:7d:cc:c5:a1:
55:d3:33:c4:fe:f3:34:27:e6:0f:d9:45:ad:6a:a4:
01:a2:cc:a2:33:0c:8d:a0:9c:b7:5a:fc:5a:4e:21:
6a:55:08:cf:cd:40:6a:2e:e6:e0:bd:fe:9b:d5:1d:
3f:68:2e:35:a2:0f:10:06:bc:6a:6b:df:b4:98:ea:
f0:e8:8f:b3:80:4b:4c:9a:42:4a:01:a5:7f:bd:81:
a5:4c:72:da:dd:fe:fb:09:30:52:e2:bc:ad:cd:15:
1f:67:8f:7c:11:ec:d6:23:ac:86:30:67:eb:95:d1:
87:3d:7a:28:3b:e2:32:1f:ed:11:35:c0:5e:5a:d2:
7c:fb:05:68:cf:c7:62:bf:ca:8b:09:9c:b5:67:56:
63:e2:78:d9:d8:18:ee:f4:6b:85:7e:6a:5a:b0:ad:
b9:6f:83:c8:b1:00:d1:3d:0a:25:b1:c6:34:55:34:
fe:02:f5:0a:97:a3:bd:e6:27:e1:36:63:43:12:18:
df:d9:80:44:d5:42:97:17:24:3f:19:0b:7b:ca:8d:
b9:e4:07:17:fe:dd:c4:06:5b:b5:b8:d9:69:c7:f5:
a6:48:07:87:ea:41:69:cd:1e:c0:c9:0b:66:85:d9:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:3D:6B:F5:7D:48:5A:C6:89:31:B9:93:56:FE:B0:AC:42:6C:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b08af0f-0784-300b-90d5-d05ee869dc91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:36:8f:f0:de:03:ad:b1:37:e6:c0:13:5a:85:cf:46:8e:b1:
b0:9a:71:18:5a:5e:c0:5c:d0:8a:7c:60:60:b6:e9:67:d5:b3:
9b:84:58:fd:56:ce:aa:a2:18:1c:0d:c3:90:7f:d7:3f:65:da:
d3:72:0a:fc:6e:dd:dd:40:28:24:9c:6b:fd:e9:b6:09:ab:ee:
b1:13:45:47:57:49:47:fb:27:96:73:61:e4:2e:0e:af:18:df:
d0:35:d3:f7:41:dd:42:ba:e5:be:7b:61:d8:7f:aa:a9:c4:cf:
6e:16:c0:9f:12:3a:29:75:de:a6:5c:f2:c4:cf:1a:0a:f7:f6:
e4:d4:5c:b5:8a:36:6b:ca:dc:93:41:53:0f:c2:6b:ba:54:30:
6e:c2:38:81:6e:54:77:71:99:61:9e:66:22:7c:3e:a8:43:54:
8a:7b:17:51:ff:d5:0f:51:58:5e:ae:74:9a:ec:c0:2d:52:51:
d7:1e:8e:b5:b1:d7:c5:ef:58:ee:5e:b9:de:a1:47:6d:9a:d1:
76:f2:e4:3d:07:41:7f:f0:d8:43:65:82:7e:00:ce:e9:b4:1c:
de:be:be:c5:3d:7b:0b:58:03:a6:07:75:7f:5f:a2:f1:ec:0a:
ad:42:90:c4:f2:8c:03:5a:a6:ae:09:ad:0a:3c:35:a1:89:97:
c4:05:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:40:59 2025 by rpki-client