Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa
File: 5c4d4390-cf6b-3694-845f-b3f976f482a7.roa (raw, json)
Hash identifier: omWBRUcyLY1/lO7SFFv4m3CpigNfOj6ctGC3QYjsC38=
Subject key identifier: 5A:02:89:26:71:0A:BF:AA:2F:95:BE:98:C7:70:77:C8:84:92:A8:19
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15500A199D03258D3240E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.20.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:00:a1:99:d0:32:58:d3:24:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=31c22463-7792-4a2f-8613-f6fb1e813068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:2a:0f:81:36:0f:f8:86:23:96:5c:cd:df:
c0:6b:25:f0:bb:e5:36:06:9b:a0:f6:bc:60:b2:2b:
cd:64:11:52:c9:be:aa:83:00:93:47:44:1b:cd:a4:
51:1c:30:cc:0f:36:4a:48:e2:1e:93:92:f4:d0:4a:
8d:1e:24:48:e0:02:1c:4f:2d:25:f8:66:19:20:02:
fd:b7:46:e4:21:4b:57:4f:1d:8e:39:91:e5:3a:c8:
a8:25:4d:24:f6:32:54:8e:89:71:22:dd:94:f4:32:
77:3d:36:23:00:e9:9b:fd:93:61:a3:91:40:77:8b:
93:5f:43:37:c9:64:11:f2:b1:0f:78:52:75:06:aa:
37:e3:86:9b:25:6c:75:06:01:ae:a3:c1:2d:21:b4:
35:b2:c1:75:26:1f:bb:38:c6:75:a5:e3:dd:90:fe:
6d:44:6f:f4:70:85:a0:75:ad:11:98:88:ed:dd:3d:
63:62:69:32:17:4c:b3:0f:bb:5d:ee:84:1c:75:a1:
83:b5:16:72:19:7e:58:6c:f2:bc:1c:4f:e2:ee:1a:
ea:b3:25:59:1e:cb:f5:88:df:5e:3d:7e:ea:d6:04:
48:de:0b:d9:13:f2:e4:39:28:ae:2e:5a:1b:4d:f6:
ef:e1:59:49:ce:9b:7a:9f:c2:ca:c1:f2:04:3b:f8:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:89:26:71:0A:BF:AA:2F:95:BE:98:C7:70:77:C8:84:92:A8:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:50:09:89:83:02:57:48:f5:3b:ab:5d:54:55:ba:56:f5:51:
c8:2d:4b:07:de:cc:2d:96:ca:8c:b0:c1:96:ac:af:4b:f0:8d:
2f:76:a9:cd:48:29:b8:57:e5:60:da:58:cd:ad:95:65:72:cf:
0a:5b:f4:7f:88:d0:97:72:2e:d2:3d:a1:d1:8e:85:c1:dd:3a:
e3:97:13:d4:c8:41:b7:78:d9:4f:7d:1e:db:5c:a2:ea:47:c4:
fe:85:79:b5:81:c4:2a:26:4a:f1:77:b3:ed:c7:c6:cc:0f:ba:
c5:fb:76:b2:4d:e8:1d:a0:d7:df:0d:cf:a5:b7:55:ff:46:04:
b1:55:d9:d8:56:88:97:27:42:ee:e3:ed:58:9a:6a:ba:da:cc:
73:56:99:db:63:57:9d:47:9b:5e:1a:0e:30:2f:70:3e:39:ae:
8d:61:2a:3b:e9:93:94:29:15:2e:b6:e7:51:b3:3f:26:8f:f6:
89:9c:33:4e:15:99:0c:1a:b0:49:42:3f:f6:57:6f:9b:54:1d:
17:78:82:1e:7c:15:9e:8e:8a:b5:30:05:23:f8:86:8a:6e:04:
95:6d:0e:2e:0c:da:74:45:17:7d:1e:c8:50:e0:aa:88:35:85:
cc:78:7b:6f:6c:2f:a4:0b:dc:61:15:a2:9a:d3:5f:01:b5:33:
8f:64:20:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:44:21 2025 by rpki-client