Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa
File: 650f609a-46ec-31db-af26-e52181428728.roa (raw, json)
Hash identifier: vrcAOu+asfW74NiJqkrqlG/24nZNPnK9c7mU2q6yZ9Y=
Subject key identifier: D9:74:46:74:BF:CE:64:0D:8A:B2:A5:80:5C:3B:37:CB:58:BD:47:86
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858487750AABDD70BD35FF3C2E580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa
Signing time: Tue 07 Jan 2025 13:50:37 +0000
ROA not before: Tue 07 Jan 2025 13:50:37 +0000
ROA not after: Mon 07 Apr 2025 12:50:37 +0000
asID: 7029
IP address blocks: 98.22.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:50:aa:bd:d7:0b:d3:5f:f3:c2:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 13:50:37 2025 GMT
Not After : Apr 7 12:50:37 2025 GMT
Subject: CN=8043cff3-6ec7-462b-ab9f-02152e9e4ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:cf:fc:52:c5:49:d0:3a:e8:c9:7e:fc:66:
0f:31:91:52:7a:88:aa:e3:c8:d6:cf:30:b9:51:fd:
e2:de:08:89:95:ab:e6:ab:19:b8:fa:14:a6:b5:10:
14:53:a9:db:9e:ef:f4:d5:be:c5:7c:b7:46:59:9f:
30:8f:a0:b6:dd:98:be:07:d6:e5:8f:60:26:14:8b:
50:35:5e:4f:01:ef:28:38:93:42:10:ae:60:62:38:
dc:07:1c:43:6e:1d:3a:eb:b6:0c:a0:79:23:16:ba:
c7:83:a1:0f:a6:82:e0:16:31:bc:40:a5:e9:a8:6e:
4a:19:c2:f2:5d:28:71:0e:09:32:04:ed:d8:a8:9c:
a3:28:e9:a8:e9:e5:3e:26:78:f6:9c:64:79:1a:36:
53:72:98:81:14:37:a4:37:4c:b3:5d:0c:30:a9:ea:
1a:89:a1:5c:4c:2a:06:40:45:19:9e:4b:34:87:2f:
d3:d4:f2:3a:cc:ee:a1:f0:36:d0:62:2a:4d:2c:82:
10:b1:d0:2e:47:37:27:5a:5f:18:8b:35:ce:b3:3c:
07:c3:3c:9d:bc:31:f4:6f:85:af:a2:a1:c8:bd:94:
7e:29:de:ed:54:3f:94:00:1d:cf:86:75:49:7b:b2:
d2:62:c2:a3:3b:51:42:c7:04:91:67:25:08:2c:fa:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:46:74:BF:CE:64:0D:8A:B2:A5:80:5C:3B:37:CB:58:BD:47:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:9a:ce:1c:18:d8:3b:30:33:c9:61:35:27:b6:61:4b:28:ef:
25:83:2f:6c:f4:52:d9:43:8e:81:a3:3b:f7:00:80:0c:1a:d7:
68:5f:de:16:04:ea:57:4e:ed:a2:52:ac:3f:ea:9a:bd:c6:62:
11:3c:6a:60:d0:32:f6:ef:65:a6:1d:d2:49:d2:e3:f0:4c:85:
89:a0:c0:62:23:6a:b4:36:02:4d:01:5a:d8:9f:ad:75:45:21:
54:7e:34:62:13:df:51:ff:ad:d5:87:5c:03:44:90:6c:1f:18:
00:a5:6c:cd:fa:69:c0:df:aa:37:86:29:a5:0a:f3:1e:d3:68:
58:fe:d2:66:80:76:ab:30:69:bb:ed:cb:4d:94:8b:5b:2a:b8:
c9:7b:a3:e2:33:73:03:bc:aa:d2:a2:5d:44:5f:d0:65:21:4c:
b8:0c:8e:2e:c9:51:3b:14:eb:63:c9:30:62:2a:16:5f:bc:ae:
3a:43:7b:96:da:1f:95:29:b3:a0:f4:2a:d7:34:59:7c:10:ab:
32:ef:85:46:99:cc:15:b1:b7:f1:ad:22:1d:db:ff:72:95:45:
67:d1:1c:14:dc:cb:a5:eb:af:f2:1d:a1:51:8b:da:20:0c:fc:
84:73:99:d2:9a:da:c7:15:57:20:e6:33:97:80:7a:0c:24:8c:
46:0d:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:46 2025 by rpki-client