Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa
File: 0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa (raw, json)
Hash identifier: OfPiAEMUgkQqUsMgUSQ2giUwA1Pv9KQyjBYzBZy+EsI=
Subject key identifier: F8:BD:68:78:DC:FB:3F:EB:30:58:85:5F:AE:1D:2F:07:5D:ED:81:4E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848BFEBC2E02ECFC8865B847340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 98.17.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c2:e0:2e:cf:c8:86:5b:84:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=59945617-90b7-42bc-9732-6ebf319eedc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:5c:84:ff:2e:43:39:ed:aa:b4:c4:f6:ce:
bd:b7:e9:af:4b:cc:b4:f7:85:71:d7:f2:75:8d:9a:
04:07:7e:28:e9:dc:6c:2b:40:a4:ff:70:2c:83:51:
46:1e:ed:23:62:4e:52:73:a6:6f:42:e5:2e:d4:50:
ca:44:09:33:2a:8a:b1:58:f4:06:8b:3c:2a:dc:80:
9d:ce:70:fd:0c:75:3e:51:29:e8:4a:dd:8e:3f:92:
3c:76:ca:a4:90:56:3c:8e:c8:8a:64:a4:f7:99:d7:
2d:53:38:dd:55:a8:d4:93:80:b0:2b:f3:82:82:61:
6a:c5:aa:d6:ce:bb:d1:98:eb:a6:56:2e:19:a6:fc:
bc:eb:57:77:28:07:b1:54:aa:39:3f:6b:e6:83:bb:
8c:2b:05:55:9b:6f:09:14:87:8c:d0:78:d9:d8:18:
12:ab:01:b8:ea:6b:f7:c3:0b:0e:23:54:00:7a:27:
1f:7e:c8:8e:91:f1:22:0d:09:f7:bc:3d:2f:eb:95:
67:05:43:e1:60:fb:bc:61:83:35:21:b6:64:53:f0:
0a:d1:a2:1c:67:7e:52:db:f3:38:43:6a:3c:c2:06:
ab:1b:43:e2:37:e8:a9:d3:62:8c:e2:90:e0:ee:b4:
a8:9f:b7:b4:17:4e:0f:6f:95:ca:1d:0a:65:ad:d6:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:68:78:DC:FB:3F:EB:30:58:85:5F:AE:1D:2F:07:5D:ED:81:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b7:57:e1:d3:e0:d5:5a:96:de:4f:0e:0a:72:67:a8:b1:11:
50:9a:fc:13:e2:2e:e0:97:f7:8e:37:e9:79:33:d9:0f:b6:0b:
be:0a:49:78:d8:21:4b:da:5d:00:02:a6:33:82:a9:0a:dc:99:
0d:57:2c:f0:76:98:5e:93:e0:10:59:fb:07:9e:2f:7a:9c:b8:
10:f1:7e:36:a7:b0:c2:cd:ca:2f:71:54:e6:0c:e3:47:87:31:
c7:b1:84:50:a3:50:62:d3:a7:4d:85:a4:36:60:89:8a:1f:5c:
ef:c2:aa:f3:35:3f:e2:06:b3:6f:8f:fd:1e:c6:ae:7e:87:17:
6f:4e:57:a9:d2:9f:14:e8:a5:7b:72:1f:84:1d:15:3f:f6:b6:
6e:15:9f:41:c2:3f:56:44:ba:db:b6:ad:1a:f9:22:c2:2a:60:
9f:01:12:41:20:33:3a:13:d6:a4:18:1a:27:11:81:e8:00:41:
73:05:3b:69:a4:51:3e:44:54:68:e7:da:9b:e5:9a:a0:e3:5c:
91:6d:b3:a8:f9:ba:1c:5f:a8:2d:ad:e3:d4:46:27:f5:16:d0:
cc:98:53:35:8f:66:64:c2:82:1d:20:96:52:18:29:d3:4b:a6:
a9:57:1b:62:18:7a:68:2f:93:85:b7:eb:9f:d1:0b:56:14:7b:
f4:9b:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:53 2025 by rpki-client