Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa
File: 9d08a5cf-3277-3703-9515-b5271bca93a5.roa (raw, json)
Hash identifier: m9sAre35vbnp3PWzi36jWM1PQ7lgR59jpyfQ9d5mYc8=
Subject key identifier: 59:AA:0B:0B:2A:DE:59:96:DA:AF:9D:4B:5A:41:19:35:72:54:06:EF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB5707CB4FBC0C179335C40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 98.20.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:70:7c:b4:fb:c0:c1:79:33:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=d8d9a180-646f-4243-a82a-a6dcd4da7197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:e9:a8:33:cf:6e:2f:fe:26:95:5d:5a:3d:
5a:36:db:48:04:c3:61:34:7e:54:61:8f:3b:a2:66:
82:49:d5:2a:47:8c:87:47:52:0c:a2:54:ad:ed:b8:
bd:a1:6b:5d:0f:bd:35:c7:15:b1:42:d8:86:af:7a:
fc:02:75:f4:40:d6:6d:a0:94:bf:68:91:fd:bd:dc:
72:6d:6d:ac:30:4c:f4:2d:f3:2b:8e:ad:f1:14:cc:
f5:fc:67:20:36:7a:ec:4f:c3:8a:9e:b4:04:da:a4:
07:66:91:e4:68:12:e8:c7:f3:31:cf:cd:ef:fb:23:
43:fb:92:9d:91:7c:fc:11:d5:55:ab:94:46:c0:59:
59:e1:95:ac:f0:0b:b0:ca:a0:1d:4c:f0:8f:a1:ac:
fc:0e:a9:93:cc:87:a2:e4:de:1a:10:6b:0d:61:59:
e2:bd:40:75:1b:51:e4:8d:08:f5:4a:a5:b2:eb:c9:
f5:ac:e9:23:c9:56:6a:7f:7d:6c:18:02:6e:ea:d8:
f9:7a:87:f5:99:e3:21:42:40:f4:32:f3:d3:36:26:
e9:f8:de:25:56:08:ef:b7:54:4f:38:c0:84:34:60:
36:45:33:ce:71:3f:85:e0:7d:20:4b:31:61:9b:57:
3d:da:5f:e6:15:f6:9e:a5:61:f6:ea:b5:c6:5f:80:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:0B:0B:2A:DE:59:96:DA:AF:9D:4B:5A:41:19:35:72:54:06:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b5:0f:66:21:4a:c4:7c:25:70:04:2c:11:d5:59:2e:5d:b5:
f1:ae:8d:e6:2b:8b:29:5b:59:01:97:76:cf:ec:d6:00:92:de:
99:49:5e:2d:f2:4e:6c:90:37:c1:b6:63:48:bd:12:af:14:99:
47:85:6a:41:5f:04:f6:5c:4f:22:d2:5b:05:ec:ca:f9:33:93:
7a:e1:b2:d3:d9:43:3b:0f:6b:c1:21:55:89:7f:8f:2d:f5:38:
6a:2f:c2:7c:fe:9c:27:80:92:ef:ac:38:bd:de:78:79:6a:37:
1a:6d:bc:92:79:ac:7a:0b:20:02:94:d4:ac:05:82:99:c7:28:
22:c0:3d:db:85:50:7a:85:d7:42:95:3b:9d:fa:69:e8:6d:8f:
9c:58:73:d8:b1:27:27:2c:4d:db:fa:34:c8:5c:05:81:65:ac:
79:6d:30:2e:82:aa:46:9e:47:d2:21:30:4a:22:c8:e8:27:a0:
9a:21:4f:c9:9c:ef:94:4f:fd:fa:e4:43:a5:52:5d:2e:25:06:
7a:f6:64:26:7e:5a:06:5a:89:98:f2:9f:67:13:62:e8:0d:b7:
a9:60:25:2b:73:8d:54:e6:19:b1:54:12:9e:be:a8:4c:98:57:
4f:5e:39:51:9c:97:8a:86:f4:f3:b1:cb:b0:31:bb:04:7e:9a:
bf:70:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:28 2025 by rpki-client