Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa
File: 8f4b3c29-f04f-376c-b398-03b99174ddb1.roa (raw, json)
Hash identifier: sJ5bv4+iSVLPXmz701HuIZQwmEHFj8EZGkZ0InJZ2GU=
Subject key identifier: 5E:64:70:CE:B6:61:88:A0:2E:4A:81:FC:62:11:2B:8D:82:50:F6:33
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848775154A77459AD8F433A4000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa
Signing time: Tue 07 Jan 2025 13:51:57 +0000
ROA not before: Tue 07 Jan 2025 13:51:57 +0000
ROA not after: Mon 07 Apr 2025 12:51:57 +0000
asID: 7029
IP address blocks: 98.22.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:51:54:a7:74:59:ad:8f:43:3a:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 13:51:57 2025 GMT
Not After : Apr 7 12:51:57 2025 GMT
Subject: CN=99d1fe9b-d84b-4e1c-a244-d58567df88ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:0d:d6:95:f8:a1:64:ab:4c:f8:72:62:f1:
1a:6d:f9:81:59:b5:5d:85:ee:4f:b8:e8:74:b9:76:
40:2f:2c:92:b7:41:e3:0d:a3:43:eb:cb:de:9b:26:
08:bd:35:7e:40:5f:15:02:50:6d:5b:6d:b9:d2:fb:
5b:d1:06:71:b0:db:db:21:d4:0c:28:24:53:5a:d5:
71:e7:d8:46:74:a0:0b:f0:aa:96:19:1c:76:a8:8c:
d1:4e:5e:a9:44:6e:63:15:40:93:c0:9c:84:25:9b:
5d:64:a0:89:59:23:2b:cc:6e:de:7e:e7:93:5e:b2:
26:66:9e:1e:13:f8:1f:92:3e:b8:27:53:18:0b:79:
3a:7c:f0:29:3b:1f:5c:9f:b4:17:55:21:ce:f9:31:
3a:28:55:b1:5a:8c:3a:c3:ce:9b:37:c0:b9:2a:a4:
fb:55:48:c9:a5:59:5b:00:b8:4f:99:9f:8b:5f:1b:
f8:73:a0:30:05:56:15:fe:b8:bd:b3:6a:f4:fd:92:
82:ed:d1:7f:30:42:22:99:40:c6:a6:f2:9d:dc:56:
45:3c:4f:96:81:07:87:ab:f5:2d:41:71:79:08:9e:
c4:d5:27:ee:e1:e7:30:39:97:e3:52:63:47:1d:22:
fb:01:92:20:35:38:b1:e3:71:c6:f4:3a:78:2f:f0:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:64:70:CE:B6:61:88:A0:2E:4A:81:FC:62:11:2B:8D:82:50:F6:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:0c:b8:65:fe:19:cd:ac:74:52:30:6b:87:92:15:94:a7:34:
99:cd:bd:24:07:ef:b5:0a:34:a7:eb:ce:e1:15:06:bc:57:27:
96:77:6b:b7:55:91:2e:95:29:de:31:92:7b:17:b3:12:a6:d3:
71:41:e9:75:de:bd:e2:d7:5a:2d:79:23:92:42:e3:8e:2c:07:
5c:39:4c:56:58:fd:75:df:a2:62:54:29:4d:5f:45:76:d0:7a:
8c:24:8f:19:9d:7f:25:88:3e:2f:b9:d7:bb:06:eb:45:3e:0e:
77:31:ce:1b:39:96:a4:84:eb:3f:bd:e9:12:be:4b:b5:c8:1b:
cf:f4:41:4f:1e:06:b6:18:c1:6a:77:6b:1f:f7:2a:f3:5b:0d:
92:46:9f:37:cc:ac:00:10:de:98:f6:6f:26:1f:b3:0c:f1:e1:
1f:ef:2d:3f:98:e2:f9:a4:9d:db:70:a5:ed:03:88:f7:c2:51:
a6:18:08:06:3f:e7:d1:84:e9:79:8d:8c:9e:82:8b:7b:cf:33:
b8:05:af:3d:ce:c1:e8:b4:85:19:b4:a7:d0:aa:29:9c:ea:8f:
2f:5a:ac:7f:3c:75:3b:eb:17:6a:31:73:50:13:7b:9c:61:41:
f6:b5:50:39:53:fe:18:1c:3e:b7:1d:68:80:69:a1:ee:54:ad:
dd:c6:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:15 2025 by rpki-client