Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa
File: aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa (raw, json)
Hash identifier: oeQvlPe42WcBJO0rrJAlO+2p6wWXi8dXsiCndfkwwtI=
Subject key identifier: 5E:D8:30:51:4A:22:ED:6C:CC:7B:D3:81:41:1B:BA:46:0A:92:24:C0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847E095014EC1856F8646904E40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 7029
IP address blocks: 98.21.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:95:01:4e:c1:85:6f:86:46:90:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=4037f334-88bd-4792-a403-3e8ebf4223fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:91:cb:ae:9b:84:6d:3e:5f:29:eb:53:68:
97:3b:a0:a7:22:9e:8b:48:6a:5e:12:a6:6c:d7:4e:
da:b5:90:99:d6:b0:72:2d:d1:0a:ea:3e:c2:46:45:
b7:9d:fe:28:11:0d:32:59:15:38:e4:dc:d4:40:cf:
8b:56:47:88:74:08:42:64:38:ce:9a:0e:20:e5:21:
be:b0:0f:fe:c0:bb:73:b8:c0:a1:bc:12:49:44:14:
ab:0f:98:23:f8:57:72:e3:8b:6c:27:c1:c9:53:34:
87:58:8d:0f:62:d9:c1:3a:e1:a3:e0:dd:6f:0e:d1:
44:0b:82:88:95:98:db:24:de:ec:0c:c0:e4:de:08:
87:a9:ab:54:bb:ad:40:2b:f0:cb:a2:19:cd:9b:71:
16:5a:90:77:7a:31:95:22:80:b5:46:e8:67:24:d2:
12:76:de:64:74:e7:e5:9c:c1:dd:f7:97:50:76:23:
dd:d1:5e:e8:36:c8:f2:cb:01:f3:ce:35:15:73:ab:
c7:7f:ca:e9:94:35:aa:86:d8:cd:30:b7:56:9a:fe:
d7:74:00:86:79:31:85:05:14:c6:26:a9:69:ca:ff:
ea:30:d5:9f:b3:4f:ce:15:ce:41:80:66:5a:da:68:
1b:ba:67:58:55:d9:d4:61:e0:95:4b:1e:12:db:b8:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:30:51:4A:22:ED:6C:CC:7B:D3:81:41:1B:BA:46:0A:92:24:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:63:8e:fc:b6:82:1c:db:f6:f8:5c:cf:4b:14:55:69:60:98:
53:de:83:23:b1:af:1f:2a:cc:cc:a2:7f:8f:c6:ae:45:9f:7c:
03:15:0c:a9:54:68:1a:0f:37:0a:fc:4b:e6:9f:3d:1d:df:4c:
41:17:b3:e0:54:a7:d1:aa:dc:71:42:95:2f:31:6b:16:60:c1:
31:52:2b:05:5d:de:bc:f2:a4:97:24:46:20:dd:e3:51:52:99:
07:10:ee:ab:8a:5e:df:58:ba:bc:ee:c0:da:26:fe:81:85:7c:
7b:5d:35:5a:2b:26:36:ad:e0:2d:3f:9a:ec:92:1f:5f:56:c9:
43:71:cf:42:2b:55:a9:85:7f:25:55:44:f9:48:69:b0:e1:36:
de:55:46:33:db:20:27:85:0e:73:88:68:64:50:e8:b5:55:e5:
18:31:a0:27:31:28:71:5c:f5:58:fc:b5:e9:c9:7e:c1:8e:6b:
bd:db:f7:7b:46:26:1d:7d:c0:20:a8:f0:1c:76:06:59:f3:e7:
b1:21:31:40:68:d1:a9:ca:fc:59:ad:f1:4a:37:bd:b5:fb:b3:
19:31:f8:e6:03:ad:a2:fd:1b:72:84:d2:88:be:f0:6f:96:bf:
b5:f5:6f:6e:76:fe:ae:b6:40:1b:5c:11:79:37:58:c2:97:a9:
93:b8:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:04:48 2025 by rpki-client