Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa
File: 0b6db478-8531-3fa9-ad15-f50272ba9617.roa (raw, json)
Hash identifier: FU0TJAsdAycLB3kJSyaPzjF8iZAU26DIgw97yJ9WP8w=
Subject key identifier: C9:5F:AF:D4:98:60:EF:C1:94:A6:C8:ED:DB:86:61:4C:F9:03:F9:20
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F65BF4EDB86A9A380A492980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 7029
IP address blocks: 98.20.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:f4:ed:b8:6a:9a:38:0a:49:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=24d4e38f-023a-45a3-b70e-929167230c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:63:06:32:ed:bd:24:9d:41:87:a9:d6:c0:
24:0a:39:78:6e:5e:1a:f8:ad:ff:b9:8a:bb:32:ef:
8b:03:09:7a:52:e0:0c:3d:30:ac:af:eb:f2:4b:66:
b7:c4:66:2c:f1:d0:16:b2:e2:8c:4f:89:8d:68:61:
76:2f:79:cb:2e:1e:53:20:53:01:6d:99:0c:79:79:
2a:4d:1b:b5:a5:04:47:3e:97:db:34:5f:fc:08:37:
73:70:c7:47:63:f9:c2:b5:7c:57:bd:6e:2f:f1:f0:
fd:1e:a8:f2:54:68:a8:61:1f:df:2c:02:2d:6d:8d:
dd:91:a0:8d:da:bb:f2:94:c8:43:cf:ec:d5:ec:d2:
9a:64:cf:58:72:f5:e3:47:88:2e:68:1f:8a:09:27:
7d:eb:53:1c:a0:ff:d9:81:db:28:87:2e:f8:00:18:
c9:fd:6a:09:0a:0f:29:1b:c8:d2:87:ba:de:6e:b2:
8e:60:c1:87:83:ce:2e:86:8c:e2:df:1f:85:fe:e4:
0e:c6:2b:55:b5:d9:5e:db:73:71:25:72:7b:f9:65:
42:cd:d0:a3:e1:c3:f3:b9:8d:d0:0c:fc:38:94:58:
b2:b6:af:33:98:d7:dc:e9:47:3f:78:79:72:69:9c:
42:4d:22:22:6a:17:92:03:02:2a:4b:95:86:b2:49:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:AF:D4:98:60:EF:C1:94:A6:C8:ED:DB:86:61:4C:F9:03:F9:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:40:b5:6f:8d:91:56:e1:c8:0e:93:62:4a:92:0b:e9:b7:9a:
ed:5f:99:9c:be:54:f8:fc:44:ed:bd:67:36:30:f1:2d:54:42:
92:0d:94:8d:6e:46:26:eb:9c:71:df:27:31:30:fa:df:ad:59:
0b:d3:8a:e6:e3:b7:29:8b:e9:c6:d9:47:7a:2b:c4:85:a5:d0:
e3:6a:09:b2:9f:76:85:49:42:b2:b4:f0:18:5e:e2:9f:ba:72:
f0:33:13:dd:dc:1d:9c:07:2f:13:4b:75:cf:12:84:8e:56:f6:
ad:33:3a:2f:55:d8:ea:2b:e5:88:3c:bb:3f:21:9e:93:f0:6f:
48:e5:95:04:a3:21:7b:3f:c2:9b:73:3a:25:9a:91:d3:a3:55:
01:ce:85:1c:41:be:55:4d:09:a2:60:8f:96:11:73:97:1e:b5:
15:05:a8:94:7c:22:a4:b5:67:69:60:12:17:1a:e6:45:e7:41:
a4:8c:bd:97:1b:64:34:32:9b:d7:57:52:50:ae:ce:ee:ee:c3:
53:58:66:ea:fa:a1:91:b5:d2:c4:0e:60:6a:e9:09:f4:17:df:
02:08:48:53:0b:9c:19:66:2a:03:cf:6e:9e:bb:c8:c3:b6:32:
92:b3:bd:b9:c9:5a:8b:fe:73:0e:1e:bd:28:89:45:9b:d1:ea:
8b:83:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:33 2025 by rpki-client