Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa
File: ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa (raw, json)
Hash identifier: JiUUGxkGS6QdXVSeHf8fJspNTMsg2w3JjFfzB5osw0M=
Subject key identifier: 8E:52:A9:D7:D1:B9:35:78:A8:26:C8:74:FF:B1:7C:AD:72:E3:AB:2E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F308528CEB750223EA95980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa
Signing time: Tue 21 Jan 2025 20:38:11 +0000
ROA not before: Tue 21 Jan 2025 20:38:11 +0000
ROA not after: Mon 21 Apr 2025 19:38:11 +0000
asID: 7029
IP address blocks: 98.22.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:85:28:ce:b7:50:22:3e:a9:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:11 2025 GMT
Not After : Apr 21 19:38:11 2025 GMT
Subject: CN=e49829c8-d37f-428f-bd61-4cf0859d5ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:4d:d6:cb:9a:ae:7d:3c:78:a4:f3:57:ad:
0b:95:cb:3c:e5:59:77:0d:58:40:74:2d:5e:87:2a:
0f:95:d0:80:13:2b:6d:76:a5:b9:65:15:22:dc:9b:
33:90:57:90:5a:06:f4:ca:9a:c5:d7:97:af:d6:10:
9a:10:d7:fa:a2:94:ec:df:e1:bf:6a:b1:d5:2a:d1:
3d:f5:d2:6a:9f:cf:90:5c:52:a3:eb:b7:b5:71:0a:
c8:e4:1c:e4:03:e9:4a:db:6c:4c:6f:aa:7f:fa:1a:
c7:51:3c:7d:b3:dc:cf:ff:89:b2:e0:13:22:00:93:
94:5d:87:ae:19:40:ca:6d:50:00:29:28:e9:5f:2b:
db:26:bc:87:7d:25:a1:bc:11:51:7f:11:ff:f8:12:
fa:29:ae:c6:8e:4f:ce:e7:2c:a9:ba:cd:1f:5c:eb:
fe:da:7e:4e:af:9b:6d:4d:56:d5:27:79:6d:dd:39:
61:17:c9:96:4d:4d:16:7d:e1:7c:3b:96:bb:ea:18:
c5:0f:c6:76:2b:ba:c3:5f:ff:93:10:11:f2:6c:6c:
60:04:d8:f3:70:1a:23:8e:4e:4d:bd:aa:26:8a:bb:
0d:a1:b0:11:47:98:46:cb:3c:1f:72:9d:4d:8a:11:
4c:11:c0:5d:96:82:7f:f2:c2:c7:96:c0:03:e9:bc:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:A9:D7:D1:B9:35:78:A8:26:C8:74:FF:B1:7C:AD:72:E3:AB:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:ef:56:17:ae:1e:9f:21:31:2e:ac:ee:e0:9b:f4:87:51:de:
81:b7:72:fc:95:90:80:77:61:be:6d:8a:c0:eb:ce:7b:25:fd:
13:37:08:44:64:af:64:91:3d:9f:57:52:64:d5:f3:dd:01:55:
d9:61:d5:90:ec:24:cf:72:98:c3:2d:ca:2c:bd:9b:42:f7:3e:
85:e3:bd:6e:8f:23:4b:c4:cc:d0:e6:81:1d:17:6b:f4:0b:99:
96:5d:23:36:67:21:90:87:1f:b4:e9:5c:01:dc:b8:22:ae:fb:
90:a9:a2:4e:f4:b4:c7:de:3c:3c:85:ab:37:26:6b:45:eb:52:
a3:49:5a:53:23:fa:45:ab:63:df:9c:a5:87:8b:cf:5d:1a:5b:
f4:a6:d2:c1:a7:49:04:8e:84:f6:54:11:c2:42:eb:69:16:fa:
9f:d0:6b:13:17:a6:be:93:d4:5d:e9:bb:d0:6a:1b:e7:02:d6:
85:9b:b8:cd:ac:59:4e:82:44:34:a3:a7:b0:85:0b:94:bc:28:
4c:a1:12:c2:80:4d:3b:bb:de:54:17:e1:f6:3b:38:0e:79:6f:
32:9d:48:60:50:c7:65:a1:bf:2c:a8:a8:b5:b7:ac:f8:22:6f:
d3:ea:03:f3:48:7a:13:1b:52:73:d7:b7:b3:78:ce:d9:f6:bb:
b7:5d:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:13 2025 by rpki-client