Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa
File: 0c00ee32-7cf1-3b20-9a9f-257687840587.roa (raw, json)
Hash identifier: iGDdD3ISbhPh62lRbeeSUaedqn7XyWhod9XIvHdNqAM=
Subject key identifier: 16:C4:82:36:98:30:C6:77:22:F6:17:EA:ED:57:C2:90:61:6C:3D:24
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F3079AA45124707B733F880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa
Signing time: Tue 21 Jan 2025 20:38:05 +0000
ROA not before: Tue 21 Jan 2025 20:38:05 +0000
ROA not after: Mon 21 Apr 2025 19:38:05 +0000
asID: 7029
IP address blocks: 98.21.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:79:aa:45:12:47:07:b7:33:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:05 2025 GMT
Not After : Apr 21 19:38:05 2025 GMT
Subject: CN=3c86f50c-1a10-4697-9705-66f57f5b1d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:0a:cc:46:6f:c3:ef:8f:50:b5:01:bc:c1:
b6:da:d5:50:76:3c:81:a2:83:b8:2a:6d:40:41:e9:
8c:b5:c2:5c:a2:8b:2b:20:88:7a:64:cd:e4:87:9c:
cf:19:fa:6a:e2:79:f1:1c:77:08:4c:bc:23:89:40:
d8:52:98:53:8f:92:d6:51:2e:6a:0d:f1:84:b2:8b:
4a:21:f2:4b:83:31:27:1c:ee:5b:b9:e4:fe:fc:c4:
6e:d4:91:56:cb:57:c4:d1:df:6f:13:e0:b7:2e:7d:
ff:63:39:fa:fa:de:25:51:7b:36:e4:b7:5e:c0:d9:
44:b5:1d:e1:e5:6e:56:43:49:6a:b7:6a:73:35:2e:
ac:f5:a2:e6:3b:93:a9:2a:06:ed:a3:53:53:0f:38:
85:5d:b5:e9:b0:e4:d6:e0:8d:e3:3f:9d:37:a0:53:
a4:da:1a:fb:a2:02:a5:13:67:91:c9:55:f1:19:69:
22:e8:1e:9f:c6:e5:21:8c:d5:cb:ec:3c:77:bd:d5:
af:3c:b2:47:4d:9e:88:e6:5d:ec:74:5f:a3:d2:51:
87:56:d3:19:86:33:3b:bd:08:4b:0f:50:a1:82:b5:
20:a8:52:ba:a3:8d:df:fa:41:40:67:00:ef:3b:85:
40:41:b5:92:16:77:8e:d2:3c:f3:3d:17:40:f3:f0:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:82:36:98:30:C6:77:22:F6:17:EA:ED:57:C2:90:61:6C:3D:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:5a:cd:5b:70:cb:83:c0:b7:39:05:15:fe:85:30:51:74:31:
98:82:9f:35:e1:21:cc:e8:7e:06:36:ee:bc:9e:69:b5:21:58:
ab:cb:55:7b:6f:fa:ed:f6:87:4f:1a:23:6a:10:95:ef:32:12:
22:7c:7a:62:c8:4c:92:9e:09:31:b6:92:2b:79:03:cc:e3:f9:
32:f0:90:d0:85:da:09:a6:95:e0:89:e8:24:fb:b8:27:a6:9b:
6c:a2:52:f5:3a:47:38:9b:41:e8:6d:d2:f6:a0:6a:93:34:5e:
62:f0:10:da:df:54:90:db:d3:26:82:be:06:e6:7c:7a:73:e6:
ab:51:fe:3d:2f:f1:ba:a8:3e:86:f8:bd:3c:52:fa:0b:86:c2:
0a:78:f5:1f:eb:83:79:b1:12:13:54:32:16:f6:d0:f0:2e:24:
ad:df:66:fb:3e:09:7b:8a:f7:f6:ac:83:f5:5c:87:7d:1a:da:
44:ff:09:07:6d:aa:19:ce:cd:9f:c9:db:4b:2a:a0:73:1a:e2:
e3:0f:56:41:7d:e9:10:5d:ca:d9:e2:0a:68:db:2d:50:72:0f:
02:41:99:6b:73:51:9a:13:40:78:e1:13:2e:29:ab:e6:32:35:
d3:69:a1:dd:ac:71:7b:38:6a:90:83:28:c3:40:22:38:28:17:
ec:8c:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:18:17 2025 by rpki-client