Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa
File: 1ac5b6f0-a954-3d72-87fe-8524a064032c.roa (raw, json)
Hash identifier: X4nhGaNfi+o0CaGLNkYikPrGG3EoBBr+wiGXodD+P18=
Subject key identifier: 8A:7E:E3:4D:9D:87:7A:32:25:96:61:11:E6:2F:B7:F7:9C:6F:36:C7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D716C34E8A8AB6B4F008E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.16.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:6c:34:e8:a8:ab:6b:4f:00:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=0308fbda-476f-46ca-a551-59b8b2e4a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:eb:29:9a:b0:b5:c3:d4:da:57:c0:a6:61:
e4:ba:3c:07:69:2a:70:7f:8d:28:ae:a2:5d:05:78:
34:eb:9d:7d:e6:c2:9b:10:d5:1e:82:2f:a5:ea:ba:
96:1b:63:57:34:03:8b:b4:1f:c0:b1:e0:b4:6e:e8:
2e:53:f2:11:9b:f3:a5:d3:6e:59:be:3a:72:a3:7b:
35:5a:e3:16:30:11:9d:08:7d:10:be:47:58:08:4f:
4c:37:08:11:04:4e:c8:9e:4f:76:42:a1:63:d5:50:
10:43:32:9f:19:e1:70:f8:6d:de:b1:3f:73:12:5c:
e1:98:26:1d:dd:40:63:25:42:9e:c8:25:6f:e0:3e:
d6:21:ee:59:65:08:1b:dc:c8:a2:8f:b8:c4:e2:54:
0a:e4:a2:cd:f2:9e:79:ab:c6:76:09:6b:1a:c1:71:
ad:1e:14:20:31:50:7f:8e:33:8e:91:62:89:92:5f:
8f:98:24:95:45:4e:14:df:a9:32:0c:05:b2:2e:d3:
70:b8:15:5f:6d:f9:95:17:56:dc:7c:78:24:6b:55:
38:39:08:f0:c1:a4:37:6d:a9:86:fb:74:d9:0c:c0:
07:0b:78:7a:9d:a2:d6:23:40:5b:df:67:66:a7:26:
5a:d2:3b:4d:a9:61:7a:8f:00:4b:f0:db:65:49:c1:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:E3:4D:9D:87:7A:32:25:96:61:11:E6:2F:B7:F7:9C:6F:36:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f9:6d:d5:1e:77:ca:12:e6:2d:f1:b4:59:34:04:10:72:75:
42:f0:f3:01:de:bb:a3:d1:30:6d:d4:43:1e:35:52:12:a1:a1:
47:3a:eb:aa:3f:5b:16:f8:33:f0:f1:3b:21:96:d0:b0:eb:4e:
81:2a:99:35:a7:26:18:84:67:cd:5d:48:bc:fa:74:4b:6d:21:
e6:8b:20:40:50:2c:70:a2:4c:f5:d7:b2:af:f2:52:9c:b2:60:
1b:90:13:9a:51:6e:08:55:28:17:2f:d3:d7:ad:ef:63:a9:de:
0c:26:4e:e7:26:c7:81:05:06:53:1c:07:8c:8e:39:74:f3:4d:
a6:c1:7c:84:ca:fe:88:eb:0d:fd:da:a1:f1:24:a3:fc:66:d3:
9d:25:e2:6c:42:69:8c:58:d2:fb:2e:72:86:6b:ee:47:4f:f8:
66:9f:d4:89:b4:9e:de:e1:b4:d0:3e:53:5d:e9:4d:ff:a5:18:
2d:94:fd:6f:de:39:3e:fc:07:37:25:a8:48:46:40:7f:6d:d2:
07:d9:97:df:c2:f1:ff:b9:a0:b9:a8:bd:5a:38:26:c7:52:4f:
b8:b0:26:9f:e4:82:12:2c:e0:e4:1a:af:d8:4c:58:db:2e:a1:
ae:27:bc:a0:68:85:8f:e6:26:6a:23:16:a9:93:25:88:54:2b:
17:98:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:34 2025 by rpki-client