Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0397e18e-5493-3df3-8971-2f0c886772d7.roa
File: 0397e18e-5493-3df3-8971-2f0c886772d7.roa (raw, json)
Hash identifier: vjlDOSIHSW5Tw7yxOshWzAOHadWYJBtpi+N+Vhrpamw=
Subject key identifier: 83:40:55:A0:0D:56:02:26:F3:D6:EC:F5:90:9B:12:D2:AA:B3:DF:2A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AAC1AEDD5AB3E3D8578300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0397e18e-5493-3df3-8971-2f0c886772d7.roa
Signing time: Thu 20 Feb 2025 18:16:34 +0000
ROA not before: Thu 20 Feb 2025 18:16:34 +0000
ROA not after: Wed 21 May 2025 17:16:34 +0000
asID: 7029
IP address blocks: 98.16.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:c1:ae:dd:5a:b3:e3:d8:57:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:16:34 2025 GMT
Not After : May 21 17:16:34 2025 GMT
Subject: CN=05f45ac7-cf5f-43f3-bdcc-82a64796c026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:ea:08:6f:3e:2d:c8:17:07:01:ec:88:69:
83:86:bc:ae:2b:8c:0d:3d:ef:e3:75:5b:06:62:fa:
e4:ab:b5:54:2e:ef:a4:e4:15:63:2f:a8:91:58:4e:
a4:6f:f0:18:6b:b8:7d:d7:6b:0a:3f:6f:aa:6c:dd:
39:82:81:f3:4a:42:78:86:d9:25:4f:58:ee:b1:0b:
d9:05:fc:11:ad:9d:76:20:6e:b6:70:9c:b2:57:73:
3e:37:91:ed:c2:dd:57:dd:4f:b0:8c:3a:7f:40:84:
60:31:93:5e:9a:eb:ea:5a:4a:2d:86:fa:4c:30:56:
f4:aa:2f:13:db:74:df:de:d8:bc:a6:49:0a:15:6b:
01:60:53:cb:85:7c:d0:d7:53:a8:6e:c1:2c:e7:5f:
81:0e:3e:05:9a:84:e5:4b:48:ee:94:81:38:75:e9:
be:a5:99:c8:91:ff:e2:2d:b5:3e:96:8e:65:b1:fc:
7a:4d:1b:9a:8d:38:7d:a0:14:e9:cc:42:97:6a:db:
9e:37:80:dd:81:c1:ff:7a:16:da:c8:f0:d7:05:b5:
69:1b:40:ce:6f:8f:34:92:86:2c:59:43:09:b2:61:
70:54:3e:21:32:76:11:48:6c:ea:63:b0:58:e4:55:
c9:d9:ee:bc:f7:b8:b3:6d:57:da:d6:b1:31:f0:37:
68:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:40:55:A0:0D:56:02:26:F3:D6:EC:F5:90:9B:12:D2:AA:B3:DF:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0397e18e-5493-3df3-8971-2f0c886772d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:34:7c:5e:27:ff:8e:bf:f3:ec:dd:bb:c3:fa:b9:4b:04:e6:
1c:e1:de:57:31:5f:3e:c8:38:38:e2:9b:a3:53:9e:a8:c3:f3:
ad:71:1e:ff:bd:d4:3f:3f:a2:ef:46:05:4e:c6:0b:07:a8:57:
90:10:22:89:a6:89:a7:dc:d7:4e:fd:a0:8b:18:94:96:95:1a:
a3:f9:28:8a:46:fa:42:53:9c:5f:24:9d:61:a9:58:3e:4f:1b:
a2:02:9a:07:5b:70:35:38:3f:1e:64:8e:0b:dc:0a:d5:24:d0:
7a:82:db:fc:fb:a2:36:3a:b4:d3:78:05:7e:9d:9a:08:be:aa:
3f:95:80:0d:e5:fc:b0:da:d0:24:fe:f0:81:c3:20:fc:97:a6:
76:f5:e2:50:0d:a7:f3:99:50:3b:e7:28:21:06:09:22:d4:57:
e9:82:20:44:fd:c5:bb:ec:27:ac:46:51:4d:f5:65:b7:c0:6c:
6d:d1:46:22:d8:9b:ae:69:58:48:96:9f:5f:70:a6:e3:66:ea:
c1:ec:02:d1:5d:6c:61:7b:9d:91:70:f3:8f:a6:15:36:b4:7a:
70:a1:10:6b:8e:e7:77:2e:2a:dc:8f:21:15:05:45:7a:8e:dd:
d6:cf:39:04:72:ba:64:2f:96:ef:3d:14:04:f7:02:b0:0f:ac:
66:ca:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:29:48 2025 by rpki-client