Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa
File: 782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa (raw, json)
Hash identifier: YJxeYJLVPINwCg7uVbS75KucVQuLn9DbUlAB9OE1blE=
Subject key identifier: 13:99:AE:37:BE:16:26:39:7C:26:7F:10:A9:A0:71:82:6D:77:06:0D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B470EA44EF52AAA767E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 98.20.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b4:70:ea:44:ef:52:aa:a7:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=b8e6a31d-02bb-46ec-bf17-e08a65f76cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:fd:30:ae:a8:79:94:19:8e:71:bf:c8:f3:
6a:50:a8:84:06:3e:7a:31:09:d4:14:1f:c4:db:2d:
63:84:16:7b:7b:94:9b:2a:65:c6:b5:c8:40:58:a5:
ca:ea:a6:74:72:d2:a1:f4:cc:19:14:e3:58:6b:51:
45:74:e9:90:d4:34:e1:d6:60:e7:93:b5:11:07:6f:
5d:12:b8:dc:2c:04:39:97:20:7a:a0:1f:a1:20:93:
f0:e3:ff:ee:bc:61:74:c4:89:77:d3:c9:07:37:d3:
78:e5:2d:a3:65:12:ce:47:4d:c8:6b:f5:5c:c0:ce:
65:64:49:1e:b9:53:92:d0:2e:b9:4c:05:6d:b0:15:
3d:59:a8:97:ec:e7:8f:fd:06:8c:a2:31:ac:2c:a9:
fa:8c:33:f8:c0:05:1c:9c:1c:8b:ae:4d:97:db:15:
b2:7d:dd:a7:48:2f:6e:19:6d:a2:de:00:18:a9:d0:
7e:b5:54:00:72:47:8e:ab:cc:2e:06:ca:b3:82:60:
87:87:f5:9b:58:c6:30:3e:45:61:43:ed:e7:2b:b9:
a2:2b:e7:cb:31:c6:3a:ce:e2:65:2e:44:d2:96:c9:
10:4e:2e:da:13:00:80:ec:58:5a:5a:07:98:b6:ac:
3f:57:3a:11:98:df:2f:d6:8c:4b:3f:dd:65:1e:25:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:AE:37:BE:16:26:39:7C:26:7F:10:A9:A0:71:82:6D:77:06:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:6d:70:2a:e4:40:42:ed:6e:77:2e:42:a2:92:3d:55:f3:c3:
d4:94:84:fb:ab:6a:76:fd:ec:76:3a:ec:ba:95:34:e3:57:83:
28:ea:56:1e:e9:00:1e:d9:89:21:07:41:4f:76:f8:5d:55:26:
92:b2:c0:51:c9:3a:c4:a4:3e:20:e6:87:9d:d1:8f:07:0f:41:
3e:f6:16:0e:a2:18:9e:cf:0c:89:28:4a:7b:fe:e4:fd:b0:9d:
a7:3e:18:09:d7:f9:85:37:2b:2e:bd:0b:ba:53:e5:5b:f5:76:
7e:d1:f7:5c:71:d9:3b:b1:bd:ed:5c:05:26:9c:17:1f:59:02:
6a:32:e7:65:e5:9b:40:37:3a:60:d8:0e:28:f3:4e:b2:a6:6c:
34:6d:c2:78:21:ba:e6:e0:f4:ca:7d:83:81:97:3b:13:3b:1c:
bf:ba:0d:33:e7:4c:02:11:8a:eb:90:a4:2f:cc:04:f4:8d:ad:
c4:2c:7c:04:d9:63:d8:ee:8c:19:74:63:bd:17:82:20:68:63:
b5:c6:78:fb:f1:b7:3f:75:0b:b1:ad:1b:e1:d9:0c:38:0c:ce:
84:2f:1a:b5:72:e1:fb:b8:aa:aa:7a:cf:78:69:3e:cd:88:b5:
f4:44:0d:27:6d:22:78:ba:c9:0f:b9:36:49:62:20:07:f6:de:
8f:4c:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:34 2025 by rpki-client