Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cdd37be-3e8c-3b1a-9124-13fbaeb2fe94.roa
File: 1cdd37be-3e8c-3b1a-9124-13fbaeb2fe94.roa (raw, json)
Hash identifier: dHHn+3NEsPCo0VMoA9nW0kixkwi5Tl2751cun2MVPXw=
Subject key identifier: 12:0C:F8:51:03:F7:D1:28:F5:CB:CC:BE:D3:87:7E:10:93:DA:5C:1C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661CE03B9E2185E5BAA44E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cdd37be-3e8c-3b1a-9124-13fbaeb2fe94.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.16.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1c:e0:3b:9e:21:85:e5:ba:a4:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=cd3e358a-508d-4038-ba1f-a636b20443ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:cb:42:44:24:3b:67:88:ca:c2:8c:38:b4:
2e:f3:d1:96:a2:87:75:b5:53:7d:ab:5a:97:68:dc:
24:2e:25:6a:ba:77:44:0e:77:50:de:fa:fe:e8:a1:
30:6a:ca:72:85:12:0f:86:7a:8a:ca:d4:d7:da:c2:
fa:d7:45:c9:d2:47:60:e4:c0:a1:88:87:c9:2f:0d:
3b:ce:16:4c:0b:f5:93:c1:d2:13:af:f9:0c:46:f1:
ce:82:9d:c3:38:d2:61:98:a0:ea:75:41:c2:9b:46:
2a:3a:12:3d:83:f0:a8:54:7b:da:5b:ae:3f:91:83:
cc:6f:cb:a6:d4:2f:56:bf:36:d0:6f:14:ec:9f:c1:
9c:e0:a2:41:3b:c7:e7:cf:1e:99:00:b9:4b:70:3a:
85:f5:e8:d2:9e:04:5d:7a:68:10:12:8b:86:02:22:
79:8b:6d:6b:f0:3a:df:67:c0:84:ba:78:38:48:75:
76:4d:5a:b1:61:42:f3:15:13:91:e2:03:cd:12:7e:
b1:fc:f5:e8:af:66:36:ba:92:5e:b3:70:67:82:f7:
4c:a1:f8:33:2d:f8:81:95:3c:c4:63:76:e8:bc:f2:
0a:43:e5:04:38:c3:bb:fb:15:8d:ff:43:99:82:fd:
50:7f:49:c0:c6:41:53:77:9b:cf:b1:80:93:5c:59:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:F8:51:03:F7:D1:28:F5:CB:CC:BE:D3:87:7E:10:93:DA:5C:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cdd37be-3e8c-3b1a-9124-13fbaeb2fe94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:29:4e:ba:7b:77:f6:e1:e7:db:7a:b1:e1:b6:f4:a2:dd:d1:
b1:0f:72:be:5e:dc:5c:25:f7:27:16:8d:96:76:a4:28:83:2e:
12:67:0a:2b:06:b6:1d:e3:9c:aa:a4:8f:2c:d5:fa:a0:8d:55:
cd:55:e7:27:d8:07:de:e3:65:6e:ee:ed:61:52:90:86:81:60:
a3:54:4a:0a:fb:33:60:72:4c:96:c8:f1:44:f4:ad:a7:28:9d:
5f:02:75:4c:01:7c:74:36:53:b4:67:33:7d:42:2f:8e:2d:34:
09:ac:6d:42:35:90:9f:4e:eb:46:cb:ce:a8:5c:a3:60:58:70:
96:a6:ef:00:91:ee:b6:d0:45:aa:43:33:45:39:61:80:aa:69:
22:1a:22:9e:3d:ef:52:60:bc:dd:65:9f:f8:0b:31:88:f3:c6:
f5:69:95:d5:39:84:07:cf:c8:b8:4e:6a:a1:86:63:7f:89:b3:
98:dc:72:2c:54:66:0e:8a:cf:62:6f:1b:f5:71:fe:c6:a7:8b:
cd:e0:a7:e6:a4:76:0e:c5:a1:b3:da:44:de:a7:34:b9:8e:7c:
32:68:74:3c:ed:9a:5f:f4:cf:f3:6f:d4:65:6b:35:a4:47:89:
fb:0d:c3:8c:ca:64:cd:fb:f2:5f:70:4e:ce:19:ed:17:58:56:
14:92:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:01 2025 by rpki-client