Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa
File: 7afb494c-297d-355b-b8e6-fe2ed907780d.roa (raw, json)
Hash identifier: 58R0y0a3264p3lRJ9dEUMC+Ep6t+ed3aPzl/mGwVcco=
Subject key identifier: 5D:F4:4D:E1:BE:CB:24:DB:A3:ED:A7:65:77:6D:43:64:73:97:63:5A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0AD455A01E94E20283440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 98.17.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:ad:45:5a:01:e9:4e:20:28:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=4b39bce4-ccce-4d9b-9bea-d1dc1b19dbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:a0:7e:18:48:e8:a2:00:de:38:b2:1c:15:
09:d3:d8:48:3c:74:bb:61:9d:a7:00:c3:f5:65:37:
bc:ea:b2:cf:57:2f:74:59:c7:2d:4c:02:9c:a9:39:
5f:a2:a1:59:c5:8f:9a:08:d8:93:ae:08:01:6f:b7:
9c:e6:3d:ae:47:61:af:95:72:33:b5:d7:0a:b1:41:
04:36:3c:6d:11:b3:6a:33:85:7c:45:e2:1e:6b:50:
6b:0c:eb:5d:95:89:2e:52:bf:07:ea:c5:01:25:65:
b2:5b:05:d6:2a:0f:27:c1:66:62:c1:c9:0f:cc:a9:
bb:77:34:d7:2a:67:57:0f:1e:44:6c:e0:e2:4d:d3:
7b:fd:a8:ad:86:6b:19:92:4d:0f:bd:55:14:b1:6f:
cd:69:ec:bd:75:41:8a:af:51:e0:af:e1:58:7d:df:
47:3b:e1:cc:70:31:e2:a7:65:81:f7:e4:e3:52:72:
6a:5d:67:6e:7f:32:b2:82:62:9d:88:6d:de:8e:dd:
a5:36:6e:70:4a:6c:a1:0d:49:a1:f2:fb:cb:3e:8c:
f5:52:ba:65:56:1d:ab:48:49:4e:a3:a5:22:64:f8:
b6:22:c5:b0:46:3a:0f:db:c0:ec:a1:50:97:67:f7:
f7:df:4d:31:e3:2f:e9:88:c4:2e:5c:ed:c5:3e:ae:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F4:4D:E1:BE:CB:24:DB:A3:ED:A7:65:77:6D:43:64:73:97:63:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:92:b7:61:81:b0:e0:61:6c:28:ff:46:25:d0:1e:c7:2f:d5:
43:99:c3:b3:b3:d8:d0:b0:b0:d5:70:5c:11:78:c3:0c:68:e1:
14:ff:fa:ee:2f:8f:2d:3e:5c:bf:2e:96:13:a8:1e:da:03:20:
71:ac:de:fb:3c:08:77:3f:4a:84:1c:a8:ee:22:31:48:1f:b6:
26:36:85:61:3c:47:4e:16:26:46:49:95:79:84:d6:e5:02:f1:
a3:29:68:aa:65:25:05:6d:a6:dd:9a:0c:40:60:5d:00:db:45:
01:08:39:17:59:f3:2c:0f:c1:ce:e3:b9:71:69:bc:2b:b0:54:
56:90:cb:1a:e0:b4:32:60:60:fd:db:99:72:a8:bc:46:cd:22:
15:c3:f4:ee:a8:fd:3c:d7:60:65:70:ee:dc:91:e6:94:da:e7:
10:11:72:92:09:aa:c2:07:03:53:bf:ba:9c:2a:d8:ec:2b:35:
3c:6b:61:f1:11:15:ee:b9:1f:31:50:26:17:70:49:3c:5e:a5:
97:1b:ae:aa:d3:95:f3:9a:2e:69:94:18:04:58:6f:e0:b1:a8:
2c:37:61:4b:f4:dd:af:3e:e5:53:7f:12:1a:be:d9:56:ee:d8:
26:4c:41:9e:f4:a4:b8:34:5c:e5:cd:91:f2:a7:f9:f0:1f:bc:
40:9c:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:05:02 2025 by rpki-client