Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da7f8794-9463-328f-a91a-ec4f3a08adc6.roa
File: da7f8794-9463-328f-a91a-ec4f3a08adc6.roa (raw, json)
Hash identifier: M7FYKskHwoMxd74aBga79+vCpuj82RjkVcpgrFPcEFI=
Subject key identifier: 54:EE:30:F8:97:ED:6C:FA:A1:7B:A3:C6:2E:FC:A3:53:55:1C:45:E5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848775143F46E374185B3CE0810
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da7f8794-9463-328f-a91a-ec4f3a08adc6.roa
Signing time: Tue 07 Jan 2025 13:51:49 +0000
ROA not before: Tue 07 Jan 2025 13:51:49 +0000
ROA not after: Mon 07 Apr 2025 12:51:49 +0000
asID: 7029
IP address blocks: 98.19.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:51:43:f4:6e:37:41:85:b3:ce:08:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 13:51:49 2025 GMT
Not After : Apr 7 12:51:49 2025 GMT
Subject: CN=12fe285f-aae4-4519-ae4d-dcae9231bc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:27:18:d1:a9:fb:d4:d4:86:01:14:21:69:
fb:4c:b8:a0:96:9d:67:e1:21:98:d8:8e:44:b3:f6:
2d:b4:f6:c6:07:9b:05:3a:40:66:12:b8:54:56:01:
07:6f:65:98:e7:1f:b3:fe:dc:4f:5f:25:9c:45:a6:
3d:72:3d:13:c3:fc:d5:b7:a5:78:4e:ce:a7:30:e9:
5c:09:9a:49:7c:c8:28:91:45:eb:2d:3d:10:b4:dc:
a2:5b:f6:fc:ba:27:6a:d2:b7:81:da:c2:c8:57:05:
16:a5:75:e5:04:28:92:fe:f2:e4:68:a6:7e:1b:3a:
b2:f2:d3:e2:0a:b7:06:8f:1d:a9:28:74:b1:d8:1c:
df:cb:ab:84:f6:5c:0e:5f:7f:60:92:26:4f:87:0d:
7a:fb:a2:7a:de:7a:dc:c3:52:2e:bd:97:19:b3:66:
46:1f:70:76:06:31:9a:5f:4d:a6:0e:c5:33:ab:e6:
38:c9:43:cf:a5:d1:a3:95:22:53:17:9e:54:94:54:
2f:af:41:b0:bf:4d:df:02:be:e5:e5:7c:73:9c:6f:
2b:87:5b:45:ff:55:02:7e:bb:20:6f:63:66:9c:0a:
a5:fe:b1:b4:b2:48:51:b7:7b:e7:91:69:3a:6b:7c:
b8:06:ec:d5:20:b4:ba:57:bd:bc:11:39:7b:a9:d4:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:30:F8:97:ED:6C:FA:A1:7B:A3:C6:2E:FC:A3:53:55:1C:45:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da7f8794-9463-328f-a91a-ec4f3a08adc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b2:7f:d8:20:e4:0b:42:e6:e2:07:75:71:fc:aa:06:cc:3b:
b0:17:95:bb:eb:9a:36:41:ca:c6:c2:15:bf:aa:71:97:c3:7c:
63:47:e6:5c:ae:c5:e5:1a:5c:8d:e8:95:1c:06:2c:8e:6c:05:
08:d0:07:21:d1:ba:23:4a:05:3a:76:b3:8c:35:d3:1c:34:3a:
08:07:bc:25:cd:39:b1:ad:63:fe:b6:7a:38:9c:4a:81:1d:9a:
8d:81:e2:dc:93:fa:0b:13:2e:e9:27:d9:57:1b:15:7c:31:6b:
07:9c:a7:b0:ac:ba:22:66:bd:05:48:02:8a:66:51:cc:4f:ba:
41:9a:e7:9f:ba:2a:e7:42:27:ce:bc:47:75:7f:0f:82:81:c7:
1b:61:ac:48:83:17:7e:7d:3c:9d:61:20:76:dc:51:ec:c7:46:
0a:60:47:d9:db:c2:c0:86:e6:8e:ce:2f:35:4d:4e:fd:3c:4e:
50:88:2e:14:1a:47:be:7e:8b:0f:f1:e4:09:bf:57:8b:b1:e9:
0a:02:ee:89:a8:5c:e0:6f:fc:bc:58:57:ec:68:ca:71:95:d7:
80:57:40:36:7b:f0:c7:c4:9d:34:6e:9a:14:9a:c5:1a:e7:e2:
60:f0:ae:c2:1d:6c:8c:53:51:f4:72:3f:99:b6:81:ac:d2:18:
51:aa:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:26 2025 by rpki-client