Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa
File: 9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa (raw, json)
Hash identifier: YKl5zJIMYSxdvmUgeljZ4bZtzz7m1HYLHv73J3pGLuU=
Subject key identifier: 4B:98:6C:9A:C2:A9:68:94:23:5F:B0:DB:60:9D:99:0D:E2:07:5A:A1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB57045675EA500FA3C8780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 98.18.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:70:45:67:5e:a5:00:fa:3c:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=1a57b79d-19a4-46fa-a16e-c274f99991cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:0f:1d:06:ce:68:93:a6:9d:ca:dd:41:c4:
22:ee:4c:b8:47:ca:b7:51:71:ae:9e:f2:2b:09:c9:
29:ee:5c:0f:f4:e3:29:02:68:b8:1d:d6:9a:97:be:
8b:6e:f0:66:14:37:b2:e8:e1:aa:5b:4a:08:dd:fa:
53:b3:f9:73:11:62:0a:f5:b0:13:d1:53:2f:a8:77:
4b:59:6a:6a:e2:1a:07:f2:fd:a5:d5:5d:8e:81:84:
10:08:fc:c3:b9:bc:77:d2:7d:11:31:5f:14:26:8e:
36:c7:e3:7b:08:78:00:2c:d4:9a:2c:8f:7c:30:13:
6d:47:58:12:70:86:e3:4b:58:cd:28:10:d9:fc:d0:
55:88:5a:d5:62:5b:bd:cb:28:91:9d:1b:de:fd:1d:
dc:3b:e5:c8:ca:90:b5:9b:51:7b:46:2e:fc:77:30:
8a:fe:6b:32:77:e4:8c:6c:64:78:20:d6:cc:3b:a1:
cd:d3:df:53:1e:f4:8c:7e:c7:97:73:a5:b9:fe:45:
a1:f5:6e:0e:0b:ca:92:2d:85:56:1d:16:9d:30:60:
99:00:7d:27:e2:af:14:8a:4d:dc:8b:b6:75:60:31:
9e:a7:2d:ed:2b:74:e2:8b:f8:dd:f7:85:7d:6e:a0:
5f:82:e8:20:10:d2:9d:62:32:a4:e2:3d:63:40:e1:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:6C:9A:C2:A9:68:94:23:5F:B0:DB:60:9D:99:0D:E2:07:5A:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:60:e9:d0:f0:0f:5c:46:73:cb:e4:d8:ec:3c:e0:37:10:25:
58:b3:1a:d6:79:50:0c:2f:11:67:3e:63:4a:27:00:55:08:0a:
21:cb:a5:14:68:cd:46:dd:1a:fc:04:e5:3c:0c:6c:e4:09:c7:
e2:7e:79:b0:d8:8a:c4:1d:55:c9:8a:ef:cb:64:85:3a:f4:e5:
5e:67:a5:6c:4f:d8:47:83:e5:3d:b4:9a:05:27:d1:bc:45:9a:
75:ed:0e:17:59:b3:5c:b5:1a:7f:be:b5:88:50:d5:de:e4:d5:
50:f0:ed:e3:86:ed:2d:be:c5:ed:37:67:77:96:0c:3c:38:46:
36:08:43:ab:79:17:24:c0:3e:66:d5:f7:3a:85:67:a4:af:8e:
0d:63:4d:c8:4a:52:01:86:25:43:e1:c0:db:3b:cf:c3:8a:63:
e9:4c:88:97:66:06:d2:33:f1:df:25:cb:a4:78:49:df:83:26:
ea:50:33:b9:3e:30:38:c7:8e:e2:7b:63:d2:31:a6:7c:82:d6:
41:24:cd:80:f2:ad:4c:73:38:f8:b0:58:5e:6d:7b:4b:d4:2b:
5e:02:cb:72:a7:37:66:8b:01:2f:e0:41:ab:4d:8b:f4:00:90:
29:50:36:c2:78:3f:d9:ea:20:bd:20:01:9e:12:51:60:a1:e1:
de:f7:6c:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXBFZ16lAPo8h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk
MWE1N2I3OWQtMTlhNC00NmZhLWExNmUtYzI3NGY5OTk5MWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZUPHQbOaJOmncrdQcQi7ky4R8q3UXGunvIr
Cckp7lwP9OMpAmi4Hdaal76LbvBmFDey6OGqW0oI3fpTs/lzEWIK9bAT0VMvqHdL
WWpq4hoH8v2l1V2OgYQQCPzDubx30n0RMV8UJo42x+N7CHgALNSaLI98MBNtR1gS
cIbjS1jNKBDZ/NBViFrVYlu9yyiRnRve/R3cO+XIypC1m1F7Ri78dzCK/msyd+SM
bGR4INbMO6HN099THvSMfseXc6W5/kWh9W4OC8qSLYVWHRadMGCZAH0n4q8Uik3c
i7Z1YDGepy3tK3Tii/jd94V9bqBfguggENKdYjKk4j1jQOGNHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuYbJrCqWiUI1+w22CdmQ3iB1qhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxY2Q0YjEtOGM3OS0z
MmY3LThkYWMtNjhkOGZjYjczZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBg6dDwD1xGc8vk2Ow84DcQJVizGtZ5UAwvEWc+Y0onAFUICiHLpRRo
zUbdGvwE5TwMbOQJx+J+ebDYisQdVcmK78tkhTr05V5npWxP2EeD5T20mgUn0bxF
mnXtDhdZs1y1Gn++tYhQ1d7k1VDw7eOG7S2+xe03Z3eWDDw4RjYIQ6t5FyTAPmbV
9zqFZ6Svjg1jTchKUgGGJUPhwNs7z8OKY+lMiJdmBtIz8d8ly6R4Sd+DJupQM7k+
MDjHjuJ7Y9IxpnyC1kEkzYDyrUxzOPiwWF5te0vUK14Cy3KnN2aLAS/gQatNi/QA
kClQNsJ4P9nqIL0gAZ4SUWCh4d73bIg=
-----END CERTIFICATE-----
Generated at Wed May 14 08:12:16 2025 by rpki-client