Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f26b341-b3c0-37ac-bd5f-385797b89f42.roa
File: 0f26b341-b3c0-37ac-bd5f-385797b89f42.roa (raw, json)
Hash identifier: zlEERYbVqkqUVJ425Ye/jzGpJm72HgEpNEYqJf6TUsE=
Subject key identifier: C3:09:4C:DD:7F:BE:0C:68:34:63:CA:D2:32:88:32:01:1D:55:A3:0C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F307C8026005482832B3600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f26b341-b3c0-37ac-bd5f-385797b89f42.roa
Signing time: Tue 21 Jan 2025 20:38:07 +0000
ROA not before: Tue 21 Jan 2025 20:38:07 +0000
ROA not after: Mon 21 Apr 2025 19:38:07 +0000
asID: 7029
IP address blocks: 98.22.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:7c:80:26:00:54:82:83:2b:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:07 2025 GMT
Not After : Apr 21 19:38:07 2025 GMT
Subject: CN=d18f3ffe-2506-4e56-8488-f83672ff2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:3b:f4:a6:95:17:6b:24:f8:d3:db:26:4f:
c2:b7:24:56:22:28:35:d7:2f:1b:ac:04:2e:af:3d:
d6:5d:59:76:08:08:df:90:13:73:09:7b:46:1a:87:
d8:a2:7b:16:df:7a:10:60:58:ca:11:de:48:48:13:
62:9c:d0:6c:92:3c:78:04:86:a7:71:52:61:48:90:
37:9f:50:75:97:dc:bb:a2:6a:72:18:6e:06:70:f6:
e2:68:49:67:d2:fa:3a:f5:ac:94:f2:98:de:58:6e:
6b:12:81:cb:01:e6:e1:28:88:d1:5f:87:67:e8:22:
c3:32:7e:5d:4b:c9:da:21:75:5c:dc:d6:13:d1:95:
6d:b5:5a:f1:2c:0d:64:f7:0f:14:de:c9:38:b8:ef:
56:20:0c:3e:5c:77:e9:fc:7d:33:14:e9:90:a3:c5:
18:85:0c:a4:cc:b1:40:7a:84:79:3a:23:91:7c:8e:
7d:6c:ca:20:80:13:78:20:3c:44:ca:27:f6:9f:17:
c4:5d:c2:a1:be:b7:fe:1d:7f:c7:5e:2a:f9:7d:92:
40:42:30:fb:ee:42:18:17:bb:ee:08:c4:6b:bf:59:
26:0c:13:1f:a0:80:3d:31:44:d9:4a:e9:83:bb:00:
8a:cc:92:7b:0d:c2:62:d3:8c:b3:cb:c1:fa:1b:07:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:4C:DD:7F:BE:0C:68:34:63:CA:D2:32:88:32:01:1D:55:A3:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f26b341-b3c0-37ac-bd5f-385797b89f42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:b8:b8:01:a7:e6:da:bd:b2:a3:32:4f:3e:35:51:29:01:da:
be:f4:6b:e0:ea:96:8f:6c:8e:71:f0:7c:95:1a:d3:3e:b0:d1:
0e:93:46:99:74:5f:c1:29:80:59:b0:7c:fd:2c:ee:84:bd:b6:
77:79:da:89:a2:31:1b:f0:18:27:d0:21:8d:79:a2:9c:c4:f5:
b3:b4:a5:d0:1b:19:0a:8d:7a:37:25:07:4a:bb:54:0b:67:48:
0e:24:0b:ef:cf:21:42:12:be:1b:20:d3:eb:6f:7b:6f:ee:a5:
2f:60:86:a3:10:33:1d:3a:ee:bc:59:ca:4d:e2:7e:98:a4:96:
70:a8:2a:40:8a:c8:61:49:5e:5d:a6:44:fc:77:b1:97:72:63:
96:b9:1b:a9:c0:d8:70:2c:03:97:0a:3a:bb:33:97:15:e0:fd:
22:e1:bb:35:58:50:6c:60:dc:4a:b5:ea:c8:79:37:2d:45:13:
12:a2:5f:e3:71:70:97:88:e0:9e:9f:f3:ae:09:1b:7c:d5:2d:
01:d4:31:ef:6e:73:6a:69:c5:d4:60:52:ef:70:51:96:7b:a1:
36:f7:fa:a4:8c:62:5d:52:b0:7f:1f:0c:e9:71:93:c2:e0:0e:
00:20:4d:54:e8:de:6e:4b:45:86:c1:88:90:4e:20:8f:83:e4:
fd:dd:a0:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMHyAJgBUgoMrNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzgwN1oXDTI1MDQyMTE5MzgwN1owLzEtMCsGA1UEAxMk
ZDE4ZjNmZmUtMjUwNi00ZTU2LTg0ODgtZjgzNjcyZmYyODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkU79KaVF2sk+NPbJk/CtyRWIig11y8brAQu
rz3WXVl2CAjfkBNzCXtGGofYonsW33oQYFjKEd5ISBNinNBskjx4BIancVJhSJA3
n1B1l9y7ompyGG4GcPbiaEln0vo69ayU8pjeWG5rEoHLAebhKIjRX4dn6CLDMn5d
S8naIXVc3NYT0ZVttVrxLA1k9w8U3sk4uO9WIAw+XHfp/H0zFOmQo8UYhQykzLFA
eoR5OiORfI59bMoggBN4IDxEyif2nxfEXcKhvrf+HX/HXir5fZJAQjD77kIYF7vu
CMRrv1kmDBMfoIA9MUTZSumDuwCKzJJ7DcJi04yzy8H6GwefFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMJTN1/vgxoNGPK0jKIMgEdVaMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGYyNmIzNDEtYjNjMC0z
N2FjLWJkNWYtMzg1Nzk3Yjg5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADe4uAGn5tq9sqMyTz41USkB2r70a+Dqlo9sjnHwfJUa0z6w0Q6TRpl0
X8EpgFmwfP0s7oS9tnd52omiMRvwGCfQIY15opzE9bO0pdAbGQqNejclB0q7VAtn
SA4kC+/PIUISvhsg0+tve2/upS9ghqMQMx067rxZyk3ifpiklnCoKkCKyGFJXl2m
RPx3sZdyY5a5G6nA2HAsA5cKOrszlxXg/SLhuzVYUGxg3Eq16sh5Ny1FExKiX+Nx
cJeI4J6f864JG3zVLQHUMe9uc2ppxdRgUu9wUZZ7oTb3+qSMYl1SsH8fDOlxk8Lg
DgAgTVTo3m5LRYbBiJBOII+D5P3doJc=
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:49 2025 by rpki-client