Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebef8a4b-3513-3868-b70d-b68fa98adffa.roa
File: ebef8a4b-3513-3868-b70d-b68fa98adffa.roa (raw, json)
Hash identifier: hZ7eRdimTCkYGxSpqX39q7gOAd+bB4eaYIBxcFVr+a4=
Subject key identifier: FE:CE:CC:FD:1A:A5:BB:57:0F:CB:0E:03:E1:1A:22:F2:B8:AA:E3:9A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848897B26500FEC2499AFF23B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebef8a4b-3513-3868-b70d-b68fa98adffa.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 62583
IP address blocks: 98.16.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:26:50:0f:ec:24:99:af:f2:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=73ace0ea-9b32-4673-9a4c-266e96bde52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:9e:cb:25:1e:3e:a6:1a:61:58:d8:2b:df:
89:f4:1b:6b:eb:73:4c:7f:b3:1e:1d:88:fc:f4:28:
4e:36:5b:64:11:e5:2b:db:70:ed:1a:a1:05:3a:01:
df:bd:d1:48:ba:d6:15:85:65:76:4e:1c:fe:82:80:
b5:e2:16:7c:e8:55:83:49:ed:3c:33:c9:00:5a:19:
ff:ad:d9:7f:71:7d:f8:b7:7f:c3:3e:0f:20:dc:2e:
dc:3e:d8:de:c5:11:96:95:86:01:b0:96:47:91:7a:
e7:7d:48:43:1f:c3:27:a2:ac:8e:1e:9e:91:33:17:
45:3a:71:cc:1c:b9:f5:99:9b:ab:d7:8c:5c:90:41:
94:51:0c:ba:52:f0:bb:9b:db:16:a6:28:d8:6e:b5:
e9:56:60:98:90:45:77:21:15:95:e1:bc:74:e6:a8:
1f:4d:e3:95:bb:e7:66:44:25:7b:59:23:28:76:91:
5f:80:49:18:8f:c4:74:ad:8f:04:29:2d:6c:08:cf:
28:15:71:10:7b:04:32:58:09:c7:03:53:12:ed:23:
71:79:0e:3d:4f:0c:30:9d:76:c3:09:08:45:42:c7:
24:26:32:c6:6b:db:4f:6a:24:70:7e:25:8c:3d:94:
cf:d9:fc:1e:03:83:e9:ca:d0:77:da:5e:ba:bc:35:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:CC:FD:1A:A5:BB:57:0F:CB:0E:03:E1:1A:22:F2:B8:AA:E3:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebef8a4b-3513-3868-b70d-b68fa98adffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:5a:f7:9c:08:e6:51:65:d8:f2:54:5d:3e:14:86:45:7a:89:
2b:64:0c:9d:d3:ed:f7:ab:cb:de:88:2f:46:2c:6d:88:b6:b1:
7b:e2:c7:ae:02:49:4c:66:d1:59:11:0e:cf:c9:0a:e8:57:12:
c3:23:7b:eb:4c:15:46:33:c2:86:61:1e:4f:38:c8:94:88:89:
fa:41:c4:3d:da:e0:0f:9c:92:c3:4d:a9:50:d8:a4:d7:7a:71:
cb:b2:27:99:05:28:9e:9c:84:50:13:8c:ef:82:bf:08:df:73:
6f:be:d7:f7:93:9f:0d:32:6d:9b:04:a1:68:bd:06:97:8b:a8:
78:6b:85:46:a1:d2:9a:fd:2c:c6:a8:03:0c:ad:b4:85:88:b1:
d4:29:16:38:61:c7:54:3e:5b:1d:24:5a:2c:3e:aa:19:6b:b9:
7c:12:a0:73:39:84:fb:5a:7f:77:8a:21:23:b8:01:eb:be:5c:
db:e9:c9:0a:ff:62:23:bc:0b:9f:ef:b8:82:81:02:f3:b4:82:
e4:9c:fd:a7:2e:cb:25:52:1b:56:48:ee:6d:8d:1c:c3:71:66:
49:88:59:d5:57:23:7e:92:ae:f4:6b:45:da:59:39:cc:29:bb:
90:c1:1c:8c:ce:e6:3f:9d:aa:35:1c:a6:09:7b:a8:bb:0e:7f:
a5:6f:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:14 2025 by rpki-client