Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa
File: f0d0f913-7559-3d06-ac30-36057e4c69cc.roa (raw, json)
Hash identifier: p1tL87lpqAFnM7fUMSpzwt+OMBpdwIiCGE8xUD6athQ=
Subject key identifier: DF:C6:36:50:17:7E:A4:0E:B6:22:BE:C5:0C:53:24:35:47:F3:5B:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A377A94676431FF5E0CC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 98.20.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:37:7a:94:67:64:31:ff:5e:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=0cdad367-f1ef-42e1-ac81-ec3fcf0ede3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:89:06:22:3f:45:33:3d:63:be:05:3c:fe:
f6:51:f6:0a:70:4f:e1:0f:5d:43:f8:ac:38:84:3e:
ac:a4:26:e6:5f:f8:99:5a:88:46:96:ba:b2:6f:18:
06:8c:d7:e4:09:d4:67:60:fa:57:98:97:e4:83:2e:
0f:5c:5f:f6:9d:87:ba:ae:52:eb:53:00:cc:85:02:
ca:60:af:a4:f0:fd:51:6d:33:6e:f2:ed:9e:91:54:
77:a3:c2:98:67:b7:a5:c6:da:8e:87:93:ca:52:07:
9f:f4:61:56:51:94:fb:38:0b:f8:7c:50:a3:08:0c:
b1:31:55:d4:ab:ee:4f:eb:4c:09:e0:eb:da:9e:55:
b7:c7:59:64:d9:32:be:0b:3b:0f:32:36:42:3b:cf:
eb:29:35:1a:d9:70:68:e9:69:76:a1:a3:71:c6:12:
e6:2d:c0:9a:cf:17:dd:89:fa:3a:70:95:2f:2b:07:
2c:9b:db:b6:a6:3e:c2:3b:ba:18:20:5a:0a:1f:e9:
9f:3b:52:65:b5:58:c7:f6:16:24:ec:32:a8:23:5f:
d0:68:fd:d9:94:85:a4:39:0c:34:c7:91:5d:47:e5:
da:aa:2a:da:b3:f3:f8:46:8a:35:b7:d2:cf:3e:20:
16:53:0a:71:ec:d3:b0:34:8f:1e:62:9c:13:8c:8c:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C6:36:50:17:7E:A4:0E:B6:22:BE:C5:0C:53:24:35:47:F3:5B:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cd:79:4c:ab:5b:dc:af:87:53:01:44:ec:bd:e1:ac:e5:1d:
4e:e9:d8:fb:cf:84:69:e6:d4:98:31:74:c4:ad:89:de:d0:9e:
f0:d1:5f:6d:f0:69:fd:df:93:f0:20:04:61:8c:fe:43:e3:1e:
df:77:34:fa:44:29:8a:00:04:24:86:2b:84:45:7c:7f:ba:3c:
c1:1c:05:d2:8b:2f:33:fb:90:46:60:35:12:64:e1:f2:8f:b1:
63:21:8b:94:18:ff:0c:23:b3:e7:06:b1:b7:78:44:65:4a:90:
28:4e:25:4e:d8:b6:ee:4a:f3:d3:e1:0b:00:8f:c1:37:a5:51:
b4:d0:0e:75:54:4b:89:c1:f7:e3:33:d2:c3:cb:5a:71:19:93:
ef:b5:c5:98:52:50:ed:a7:9d:23:72:c0:ef:a4:c3:20:e2:a4:
8b:c4:c5:f1:60:c0:33:71:7e:a8:99:42:96:cd:4c:85:39:33:
2a:d5:e7:50:ff:80:ea:4e:73:99:c0:d1:27:cb:9d:54:20:c6:
e4:80:43:4d:cd:69:e3:ef:eb:53:3f:d9:db:56:f2:6f:f1:1a:
c4:76:ea:1b:91:71:7e:94:34:b0:15:32:57:44:25:b1:0b:2e:
30:3c:31:5c:28:db:21:f2:7c:1a:c6:85:65:bf:b6:b4:11:3a:
e4:05:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:22 2025 by rpki-client