Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5659c68-6279-3031-99c3-269d1cb57689.roa
File: c5659c68-6279-3031-99c3-269d1cb57689.roa (raw, json)
Hash identifier: C2vsRnnpBrIZPvFjXgpCm8iUBG8gAijAxRwC02WXItA=
Subject key identifier: DE:B5:09:45:C6:D5:AD:DB:4C:3C:BB:AC:A3:23:50:96:CC:02:FA:38
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155004CFDA79E62137239E3
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5659c68-6279-3031-99c3-269d1cb57689.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.19.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:00:4c:fd:a7:9e:62:13:72:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=a1cd63a2-7260-4545-a88a-a747cf7562b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:d7:77:fc:27:58:b9:b9:cb:92:85:62:eb:
2f:af:36:e6:4e:06:a2:74:39:71:a1:ed:ed:e3:04:
93:a7:45:27:f5:7b:ff:55:97:b0:06:93:2b:00:4d:
2e:82:e8:5c:0a:04:70:35:fe:71:a4:b2:e2:b9:d3:
df:2c:41:84:a3:96:ee:ce:b4:07:9b:02:c6:91:cb:
75:fc:6d:ec:04:eb:e2:ab:b4:ae:d7:1a:62:0e:01:
14:9f:88:30:c6:cf:6b:07:e8:22:a6:c0:43:b2:62:
6d:39:45:e7:18:82:44:fc:ea:21:d9:17:d5:22:8e:
b3:a1:e2:2d:62:9f:ab:c0:47:46:99:90:c1:d5:f2:
90:66:72:4c:35:cb:37:16:a8:8e:ce:c5:6d:63:ca:
42:ad:b2:9e:2f:81:89:ca:ff:89:cf:e1:64:0d:0e:
9e:81:ef:87:bc:2c:62:8b:43:05:74:1f:18:5f:0c:
d0:52:5a:7c:49:45:8c:e9:cb:a9:7f:e4:6c:2e:88:
ec:7c:7a:6e:2f:d8:12:4e:cc:44:b4:77:17:74:e2:
fa:58:4c:aa:9f:1a:22:9d:cb:c5:aa:97:e7:ed:cc:
33:2f:9f:ed:ac:45:07:ce:57:73:4d:6a:37:76:ad:
59:94:db:2e:17:97:63:9c:7b:ba:41:ac:b9:c2:d8:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:09:45:C6:D5:AD:DB:4C:3C:BB:AC:A3:23:50:96:CC:02:FA:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5659c68-6279-3031-99c3-269d1cb57689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:27:8b:9f:7c:4d:34:2d:88:0a:06:e3:4d:43:d2:8e:28:57:
0c:87:ac:3d:fe:ea:ac:77:26:34:64:44:08:2b:61:5d:01:dc:
57:15:c8:0c:92:60:15:bf:96:f2:e2:43:61:c4:9d:30:ba:8f:
22:e0:2a:d1:72:d5:f5:96:2f:8b:c7:7d:b8:43:53:5b:b0:b6:
f0:13:90:7d:1c:37:f1:ba:13:fa:7b:77:d9:96:f9:6b:31:c0:
77:75:c2:00:e1:9e:89:87:44:10:56:bc:d3:ee:c6:70:4a:bc:
d1:f2:54:d6:67:1d:d9:6e:5d:e6:79:cd:5d:ad:4b:41:cb:11:
27:aa:af:ac:fa:e2:b0:39:d2:59:80:8f:9e:90:b2:aa:c9:14:
3f:bf:2e:3c:35:67:99:0c:a3:9f:78:78:9f:68:06:94:a7:77:
a0:ce:e0:4d:d0:db:89:85:b0:17:2c:c7:69:8b:43:74:03:57:
2f:46:fd:b2:8e:2c:6a:43:d3:3d:57:71:5c:d4:cd:f0:17:78:
a3:a4:ee:dd:be:2c:8e:2a:0d:5a:3e:67:9f:f5:5e:5b:72:ab:
ed:b4:9f:5a:63:e4:0e:1e:c0:04:26:42:34:29:8e:a9:29:67:
36:8a:d1:3d:a8:fe:ad:53:19:7b:4d:ed:b7:ac:f2:19:b9:84:
33:c9:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:47:04 2025 by rpki-client