Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa
File: 06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json)
Hash identifier: g2iiK6C79iraFHpPIv40vTqg65bLAVQiFqh50HEx+AI=
Subject key identifier: FA:8C:E5:06:15:E1:30:AC:1F:81:1C:44:FD:9A:E6:E5:75:5B:C4:45
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848DF9DE4BBCB5BE2BA6B325C7A
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa
Signing time: Thu 13 Feb 2025 22:30:17 +0000
ROA not before: Thu 13 Feb 2025 22:30:17 +0000
ROA not after: Wed 14 May 2025 21:30:17 +0000
asID: 7029
IP address blocks: 98.20.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:9d:e4:bb:cb:5b:e2:ba:6b:32:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 13 22:30:17 2025 GMT
Not After : May 14 21:30:17 2025 GMT
Subject: CN=aeb128c2-37a5-4b03-8178-6a8ce43f57f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:bb:e1:94:54:64:1a:9e:04:fa:0a:f3:ab:
78:32:6e:91:52:12:29:54:0b:8d:2a:09:db:25:b5:
66:75:20:e8:44:47:29:76:5e:19:30:ce:6f:a1:ae:
a6:a7:4b:63:0d:ee:bd:b1:05:f5:5f:e3:53:16:d7:
6f:11:3f:99:0a:1e:c6:83:00:25:97:f1:8e:d0:5a:
6c:70:b0:e5:3f:81:2f:c6:d9:c0:92:a8:17:ca:02:
00:7a:85:af:ac:fc:26:a4:c6:b6:48:61:6b:ea:f7:
83:0d:a7:d9:b1:b7:29:30:7b:f5:59:b2:b9:77:0a:
5a:73:21:fc:14:8f:85:73:92:6b:4f:5d:1f:78:a5:
b5:9e:40:02:bb:18:d2:d6:a6:ca:01:ba:06:ac:15:
c3:93:8c:bd:72:60:34:21:16:93:fb:90:9c:39:bd:
40:c3:e4:d4:c6:dc:f8:e1:84:da:e8:ca:ab:ab:7b:
3f:0d:3b:ba:c2:2b:33:dc:13:d3:58:12:e7:4a:89:
0a:5c:33:a0:b6:de:9c:4a:fd:db:57:07:e9:31:3a:
b3:cd:b0:ef:a4:4a:6e:8f:4f:4b:7f:eb:95:fd:16:
32:f1:6a:ef:d5:f4:c3:e6:7d:b5:5d:c5:dd:2e:e7:
71:23:3f:eb:41:f3:46:73:b7:1d:28:5b:86:49:8e:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:E5:06:15:E1:30:AC:1F:81:1C:44:FD:9A:E6:E5:75:5B:C4:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:45:4b:b7:d6:52:c4:08:26:73:b4:12:5f:33:05:10:10:2d:
19:79:85:63:d5:9d:b9:23:1d:c7:f8:66:dc:58:ed:d6:1d:1d:
20:e8:8f:87:33:96:d8:a8:9f:20:61:64:74:a1:82:d6:e9:10:
af:41:eb:b6:89:b0:96:3c:44:b8:d8:de:78:03:db:fd:8e:d1:
bb:7a:5f:e0:3f:d5:a5:a6:32:97:f6:e4:81:a7:df:5a:ef:34:
56:3f:9f:91:86:79:2f:1f:39:39:1c:c5:bd:1a:55:f5:d5:8f:
de:87:87:62:a4:45:14:c6:f6:2c:00:50:24:9e:2c:b1:14:f1:
14:0f:16:e0:61:d5:cf:8c:e5:89:e9:20:11:3f:de:73:47:9c:
25:d1:06:bf:76:37:e4:75:86:02:f7:a1:0c:55:87:0f:9c:8e:
93:71:23:9a:2d:4c:0b:44:34:59:a7:ff:b7:7c:89:c1:14:c5:
1e:64:97:0c:94:a1:d0:43:17:7e:ea:e7:e4:45:27:d7:91:e0:
c4:7a:27:0d:22:b1:2f:25:a4:e2:08:ab:82:f0:6b:cc:e1:1d:
26:59:a9:d1:6e:b0:24:c1:dd:a2:09:8a:6a:1d:39:30:fd:0b:
3a:52:86:08:b0:c4:93:cf:bd:7f:9f:c1:d5:e8:ea:c0:15:22:
86:b6:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:37 2025 by rpki-client