Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa
File: a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa (raw, json)
Hash identifier: FD+fK3zw+5L2Hzh27IiK9CTaiju+kXWFg2AVkmCtUjM=
Subject key identifier: 78:08:19:2C:D2:3F:70:26:7B:D8:9D:9A:1F:F9:BB:B9:3B:31:87:49
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584877509994168D2F61A4154540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa
Signing time: Tue 07 Jan 2025 13:50:29 +0000
ROA not before: Tue 07 Jan 2025 13:50:29 +0000
ROA not after: Mon 07 Apr 2025 12:50:29 +0000
asID: 7029
IP address blocks: 98.18.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:50:99:94:16:8d:2f:61:a4:15:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 13:50:29 2025 GMT
Not After : Apr 7 12:50:29 2025 GMT
Subject: CN=1a03c3cd-df5d-4306-87f9-a98f6013f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:9c:65:5b:a3:7b:7b:3b:b2:1d:4a:12:b2:
93:aa:2e:f6:e5:e2:38:d1:99:f6:95:46:40:97:0e:
c8:0b:ef:48:d8:7a:f4:34:de:ad:93:9c:59:9a:f4:
f8:12:79:8f:3f:57:3b:05:18:da:29:9e:9e:09:77:
b4:05:45:73:ea:bf:48:bd:f8:20:e7:84:65:b2:4d:
94:9f:c5:ee:eb:53:cd:dc:a1:1f:cb:30:5c:5b:30:
33:ca:b9:8c:f7:67:94:a5:a1:4e:ba:f1:b4:46:f1:
59:f6:f5:e0:db:50:46:67:be:ef:8c:76:ae:78:b4:
5a:11:f2:73:05:a9:01:bb:24:94:ad:01:a3:36:63:
a4:07:3a:03:c2:e3:62:7e:98:72:8d:23:80:26:75:
68:5a:fb:ac:1e:e6:68:b8:db:a7:1f:65:f2:a7:55:
d2:5e:b8:3b:cf:c4:42:b2:4b:06:38:a1:e2:b1:c2:
3a:d7:80:89:f0:3a:56:8c:d0:6c:30:98:0d:b7:a2:
55:ea:13:4c:21:90:9a:9e:9a:6e:f2:cf:66:4c:8c:
e3:b4:d1:ed:83:7d:f7:c4:9e:dd:31:06:dc:18:f6:
0c:e2:54:87:d5:ef:a4:03:a1:a7:b2:a7:bd:ad:2a:
06:a8:48:f4:02:83:1f:a7:a1:d9:64:a3:86:c5:07:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:19:2C:D2:3F:70:26:7B:D8:9D:9A:1F:F9:BB:B9:3B:31:87:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:69:4a:b4:d9:58:63:47:4e:36:0c:ee:5a:81:50:c5:28:40:
82:44:df:6c:a7:8a:48:34:cf:bf:eb:04:c8:6f:7b:7f:33:a8:
4a:8d:c1:4c:15:ee:9e:55:f2:07:b9:e2:75:6c:05:8d:ec:48:
70:25:67:8d:54:3c:52:ea:51:3e:11:a7:98:05:49:ae:f8:8d:
74:7b:2c:e8:1f:0d:50:b4:96:e2:86:66:53:fc:f5:a5:bf:03:
0e:54:76:02:13:36:e8:b3:9a:36:8f:b5:5c:f8:45:86:7a:de:
50:9e:78:d5:ba:fb:29:85:e1:bf:d7:72:63:e3:fe:14:23:9e:
c3:9f:b3:b3:79:d1:68:b6:07:89:b0:e4:4d:8e:f0:1e:f0:d3:
de:13:89:77:14:cd:89:d8:4b:63:e8:61:3e:a4:98:8f:69:3e:
55:bd:b9:aa:a3:08:d0:86:2e:dd:11:76:b4:a4:ae:e7:8f:b2:
18:b2:7a:65:f1:c6:b0:7b:57:d5:0d:cf:14:0f:34:f2:e2:fe:
c2:76:6c:10:61:fc:92:12:7a:5b:39:cc:04:a9:c2:da:43:0a:
18:30:a7:31:59:64:3c:64:d8:ac:68:91:dd:39:9e:ab:c8:11:
eb:11:d3:ee:ce:fb:93:fc:57:18:14:23:07:02:68:4f:a8:38:
1e:da:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:54 2025 by rpki-client