Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/166a8aa6-17cd-3348-8556-c715c29889dc.roa
File: 166a8aa6-17cd-3348-8556-c715c29889dc.roa (raw, json)
Hash identifier: OWzYW7EQUg9+vDHPyF0fDTRXPLCfJeIBgu51SG6lWY0=
Subject key identifier: 03:16:AE:99:F3:51:EA:F9:38:E7:90:41:2C:C5:D8:18:74:A2:5C:73
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112075AC6273BB4FA0ECE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/166a8aa6-17cd-3348-8556-c715c29889dc.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.16.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:20:75:ac:62:73:bb:4f:a0:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=7f2ec36c-1b48-4ae8-adeb-106b1fc90f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:25:68:95:ba:a3:7c:87:2a:e8:d8:03:ca:
5d:59:d4:29:1c:55:10:c0:b0:7e:87:a1:09:ad:6c:
2f:f0:b7:f0:9e:8c:5f:8c:93:73:1b:4f:4e:60:0b:
0f:c7:3c:89:d8:98:c7:ba:e2:3f:2a:3e:f8:3f:73:
92:57:56:22:7a:ed:42:70:8c:c7:93:e7:23:c3:1b:
bb:be:58:eb:ab:e3:a7:6f:bd:2f:ca:e9:06:b7:29:
89:88:60:d2:71:b4:f2:a7:7d:a5:d8:e8:3b:ca:78:
5d:b8:ac:e1:e0:6a:c8:f2:8e:70:1c:77:93:7f:3b:
c2:31:7f:de:51:c6:a9:df:92:b2:db:d8:62:e6:79:
70:f6:66:e5:ac:f8:3d:89:e4:1e:cf:8f:9c:96:38:
01:5a:f9:00:95:b4:67:af:fb:02:fe:e1:46:fd:38:
47:15:4f:ff:85:65:ab:2a:b1:13:9f:8e:33:09:d2:
ee:a6:a5:4d:c7:52:22:49:f8:dd:07:fc:35:9a:bc:
6a:50:6c:dc:91:c5:48:ee:db:15:fc:78:b8:e2:c5:
d0:88:f1:a4:65:e2:bc:e9:a5:a9:3e:fb:24:a7:08:
bb:7b:20:f8:af:ef:3a:7d:84:09:db:31:a4:a0:8e:
88:16:6b:19:cf:b7:fa:03:66:53:07:b8:c1:88:df:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:AE:99:F3:51:EA:F9:38:E7:90:41:2C:C5:D8:18:74:A2:5C:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/166a8aa6-17cd-3348-8556-c715c29889dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f7:83:a6:b4:9c:e4:dc:29:2b:3b:8e:15:df:9e:1a:e6:e2:
5d:69:6c:9c:d7:f0:87:d2:ef:a1:2c:41:b5:b6:bc:50:84:3f:
9b:9e:fb:a8:e3:6c:63:47:57:f3:52:d4:4c:3e:0f:62:66:a9:
49:1c:fb:04:f4:f0:51:6d:f2:b9:b5:3b:c4:a3:b5:b8:1a:f4:
b6:86:86:f5:5b:74:58:e8:57:0f:52:15:a5:d9:32:ff:f3:67:
c9:c1:b5:80:6f:d6:e0:1e:df:b9:5d:db:66:0d:6e:54:3b:36:
ef:fe:80:a4:b5:48:d1:48:d6:3a:f9:5b:dd:bd:d5:09:bd:30:
d5:fe:17:1a:91:9f:9e:c9:eb:fd:be:21:08:4f:9f:fa:24:dc:
b9:c1:5b:5d:55:40:81:f3:41:1d:12:14:15:f0:96:b0:c8:db:
aa:94:a7:c4:0a:33:e7:d2:b4:87:86:fb:54:49:32:98:da:32:
15:ff:51:83:c9:b1:e2:7e:9e:36:7f:4b:60:67:7e:f5:05:44:
a5:22:c8:52:a1:1e:62:ba:5f:35:55:9f:f8:bb:ce:fb:38:0a:
94:de:a3:ce:a9:a7:3d:b6:77:04:e4:63:fb:3d:02:9c:bc:72:
ff:19:f8:a9:27:09:ee:4a:87:2a:38:e3:41:51:3f:a1:3d:ab:
90:0a:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:42 2025 by rpki-client