Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa
File: 2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa (raw, json)
Hash identifier: b4yVA4Wky8hIx+NJP0W5ytvSQvmy56OQxBCeoTDpNGQ=
Subject key identifier: F8:19:90:1C:6B:9B:7A:7B:16:6E:2C:D4:5C:A9:EE:83:73:78:BD:C1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F22C2306A79395113A9D3D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 98.16.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:23:06:a7:93:95:11:3a:9d:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=eb1de76e-98ae-4b77-9b5f-d51a021d630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:c4:fc:25:60:d7:35:3f:de:73:5a:a2:e7:
24:58:8d:7e:83:c4:a9:73:a2:77:de:0d:3b:f6:aa:
9b:a7:d0:ad:14:1f:35:98:43:b0:55:3f:0b:7a:d9:
70:b8:ca:07:b0:18:ce:a8:eb:78:6c:25:f5:f9:42:
0c:fa:d3:df:9a:71:1f:3d:24:c0:eb:56:f0:a4:ae:
fe:e4:e7:0c:41:51:7a:8d:cd:05:aa:5c:f9:aa:51:
18:e0:37:09:48:df:af:96:f5:77:7f:75:80:8b:cb:
6a:25:49:26:97:2d:f2:67:eb:d8:fc:c0:09:05:45:
8e:45:c2:97:35:71:4c:17:65:14:7c:93:fc:2e:04:
88:93:85:02:07:46:36:44:aa:f7:2e:ba:74:57:60:
b9:c7:e9:16:cd:cd:a8:eb:2a:45:b9:ff:d2:a8:c7:
67:1b:de:c4:fe:3c:6d:6d:d4:c2:fd:ad:8f:09:3f:
f7:37:d3:5c:a5:1d:0e:20:1e:aa:da:b8:b7:37:ce:
6a:ee:97:5a:f1:c9:e2:36:6a:e2:b9:85:12:59:af:
1e:4a:3d:b6:08:b0:92:e0:eb:d7:56:fc:a8:b8:db:
af:92:1e:59:c4:79:a6:2e:f8:d6:f7:1a:cf:a1:78:
1c:95:95:27:8f:e5:63:74:d9:13:9d:8e:37:6f:27:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:90:1C:6B:9B:7A:7B:16:6E:2C:D4:5C:A9:EE:83:73:78:BD:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f7:19:fe:88:7d:63:a2:30:c3:ef:ab:ca:e9:84:7d:a3:48:
a9:66:41:c7:e8:31:d2:53:3f:4b:7e:25:77:12:b2:16:45:c6:
ed:71:1c:8a:5b:7b:fc:2a:c8:67:59:d0:e7:ab:6c:0f:43:08:
14:5f:6a:fe:9b:fb:6e:32:64:5d:c0:d7:ca:5d:70:83:4e:92:
a4:ad:cb:96:7d:6f:9a:3c:50:87:52:ca:a5:36:10:80:8c:3d:
f1:c3:0c:78:34:ac:4e:d0:91:ec:f6:9f:a8:7d:73:98:8e:af:
0e:3f:19:8f:cb:fa:ee:fd:dc:aa:8c:7b:35:64:d2:2b:45:9c:
3a:9a:16:d1:ac:91:b6:e4:31:e7:b7:dc:5e:13:89:77:42:81:
ba:07:c9:a6:85:23:0d:53:29:51:b3:34:84:38:b5:18:31:73:
c6:1b:ac:d1:d1:ba:32:0b:39:5a:46:4d:ed:0d:57:f6:e4:b4:
b8:f7:1a:8a:7f:1a:0a:dd:5a:cd:13:c9:b0:4f:76:15:77:a9:
bc:95:28:1e:5f:a8:2a:8f:66:03:07:7e:f8:6a:49:e5:2f:9f:
65:32:95:bd:6a:38:53:b0:7d:46:89:0b:6f:a3:29:63:6c:e4:
2d:56:76:98:0a:8d:89:b4:32:eb:ea:81:f5:bf:f3:89:3c:63:
a0:ce:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:01:59 2025 by rpki-client