Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa
File: bf629dc2-f852-3d47-a607-0e222991c7a9.roa (raw, json)
Hash identifier: LnvI7D2wDRLVPtz+M1Vkvt/w3vlFxd/RQG3LnROuY7M=
Subject key identifier: A1:4D:ED:18:E8:14:A8:CB:E1:B7:C9:DB:2C:AF:B1:BC:CE:D5:B9:FB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FB8ECDE3EA95F3B622CE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 98.17.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:b8:ec:de:3e:a9:5f:3b:62:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=dd10ff21-4574-4ec6-a43d-9237f0b3f5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:65:69:a1:74:ca:0b:46:f5:ac:82:49:61:
5e:73:60:02:e9:aa:50:6e:84:8b:84:3f:85:0e:a5:
2b:70:ad:75:62:6a:10:47:e2:fb:7e:38:b0:b0:85:
37:ea:cf:65:5c:e5:8b:54:84:66:4c:e5:c2:19:9d:
08:e2:3f:67:f3:a0:e7:40:7f:e7:98:79:4d:a1:52:
76:ef:f5:0b:ba:f0:27:0c:89:db:3a:62:cc:42:f6:
ff:03:2d:2f:2d:ff:69:9e:b3:99:47:64:c0:8c:15:
68:29:43:d2:35:ca:a1:35:0a:be:77:b4:c2:7d:86:
7f:7f:0a:50:cb:17:21:f5:41:cb:ec:df:2c:90:79:
7a:91:09:1e:b8:58:95:67:22:9e:37:9e:de:45:1f:
47:93:33:45:88:53:98:8a:68:fe:df:23:f5:43:a0:
78:19:eb:d1:37:07:13:35:ef:11:f7:07:51:dc:a2:
7b:51:c2:83:0f:6f:a0:51:fe:27:27:9a:b3:cc:dc:
61:54:e5:d7:27:04:05:87:34:17:52:e2:f5:30:d3:
89:4c:cf:ad:22:a1:25:e0:02:01:90:2a:59:2f:3a:
92:f9:6d:e0:ea:15:a4:76:ba:67:8a:bf:bb:e2:31:
2b:12:ad:f6:c3:90:e6:9c:0b:17:9c:83:d7:ad:85:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:ED:18:E8:14:A8:CB:E1:B7:C9:DB:2C:AF:B1:BC:CE:D5:B9:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ee:19:4a:dd:6e:89:c3:42:c0:d9:86:48:1b:fa:df:28:f8:
91:67:c1:08:19:24:29:b3:a9:7b:89:0d:ee:ac:b8:78:e9:e8:
86:58:3a:40:e7:67:bd:8d:a1:11:8f:45:70:22:50:73:92:06:
15:78:84:c3:f0:a4:40:f1:f3:13:6b:5e:00:05:b8:b2:31:19:
9e:79:d5:5a:f8:bf:e0:2f:af:33:f5:f2:0b:3b:2c:81:6b:21:
d4:b2:c7:4a:8e:2a:f2:6b:b9:2c:24:24:8c:4f:0c:b2:c3:87:
72:d3:98:18:25:cd:9b:40:04:18:21:ac:8e:96:9f:80:1d:6d:
55:a3:cd:d6:76:80:2b:1b:0e:c3:3f:11:c8:0d:af:f3:50:0d:
98:80:e7:33:a5:ad:1a:71:61:0c:7e:e8:d9:80:1f:c2:6b:0a:
88:ac:6d:f3:7f:be:c8:3e:b1:2f:89:2d:7a:5f:9d:33:05:73:
67:db:ea:b7:e2:ee:9b:01:21:8a:f2:84:69:74:07:06:60:5a:
fb:a9:e8:31:fd:bb:83:46:f4:5a:07:d4:2d:14:5a:7c:30:32:
cc:59:ae:ac:99:69:01:0f:f3:c9:af:0a:08:11:72:9d:63:f2:
ac:e3:95:a2:55:8d:12:31:ae:cc:44:a2:d3:33:e5:27:8e:10:
0a:bd:06:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7js3j6pXztiLOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
ZGQxMGZmMjEtNDU3NC00ZWM2LWE0M2QtOTIzN2YwYjNmNWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOFlaaF0ygtG9ayCSWFec2AC6apQboSLhD+F
DqUrcK11YmoQR+L7fjiwsIU36s9lXOWLVIRmTOXCGZ0I4j9n86DnQH/nmHlNoVJ2
7/ULuvAnDInbOmLMQvb/Ay0vLf9pnrOZR2TAjBVoKUPSNcqhNQq+d7TCfYZ/fwpQ
yxch9UHL7N8skHl6kQkeuFiVZyKeN57eRR9HkzNFiFOYimj+3yP1Q6B4GevRNwcT
Ne8R9wdR3KJ7UcKDD2+gUf4nJ5qzzNxhVOXXJwQFhzQXUuL1MNOJTM+tIqEl4AIB
kCpZLzqS+W3g6hWkdrpnir+74jErEq32w5DmnAsXnIPXrYVkWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFN7RjoFKjL4bfJ2yyvsbzO1bn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY2MjlkYzItZjg1Mi0z
ZDQ3LWE2MDctMGUyMjI5OTFjN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXuGUrdbonDQsDZhkgb+t8o+JFnwQgZJCmzqXuJDe6suHjp6IZYOkDn
Z72NoRGPRXAiUHOSBhV4hMPwpEDx8xNrXgAFuLIxGZ551Vr4v+AvrzP18gs7LIFr
IdSyx0qOKvJruSwkJIxPDLLDh3LTmBglzZtABBghrI6Wn4AdbVWjzdZ2gCsbDsM/
EcgNr/NQDZiA5zOlrRpxYQx+6NmAH8JrCoisbfN/vsg+sS+JLXpfnTMFc2fb6rfi
7psBIYryhGl0BwZgWvup6DH9u4NG9FoH1C0UWnwwMsxZrqyZaQEP88mvCggRcp1j
8qzjlaJVjRIxrsxEotMz5SeOEAq9BhY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:29 2025 by rpki-client