Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2247de93-6f01-3a4a-be56-bea5cdc55644.roa
File: 2247de93-6f01-3a4a-be56-bea5cdc55644.roa (raw, json)
Hash identifier: BEMPPm7lMTO/0cjWI979ML25CuVEjGrBdhuKZYCJNPc=
Subject key identifier: 95:11:9A:F1:CF:F9:06:AA:48:49:A9:0D:83:FD:EE:6E:3A:B1:3D:92
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661D2C70BF4000A3A3564659
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2247de93-6f01-3a4a-be56-bea5cdc55644.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.17.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:2c:70:bf:40:00:a3:a3:56:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=f2279385-fc9a-4983-b9bf-3fe43f6a16f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:aa:2d:75:e5:29:86:54:b3:f0:7d:d4:09:
99:b8:db:0a:2f:b9:04:6d:8a:d1:bd:26:e4:4c:1f:
10:cc:99:aa:a6:91:b4:43:18:7d:e2:77:00:cd:68:
51:19:ba:7d:60:29:2e:b9:04:b3:26:ce:57:2c:1b:
d4:4f:4a:10:f9:72:4c:c6:dc:7d:d7:53:9e:7a:4a:
4f:88:36:97:cc:0c:2f:0f:1e:b9:9e:07:af:62:cf:
74:55:84:8c:e0:ac:f6:12:cf:6f:09:68:af:be:df:
60:52:5d:04:7b:8f:1c:fb:fe:e7:0f:da:49:c5:c8:
eb:cf:c5:4f:9f:02:af:02:c4:70:b3:6f:21:e7:b6:
d2:c4:6a:de:a8:85:2e:07:ae:2e:35:89:75:f9:85:
4a:ce:26:cb:91:03:bc:48:9c:b2:39:69:8f:bd:fa:
d2:97:2f:3b:18:f8:20:60:6c:e8:80:d4:9d:79:32:
5f:84:d5:e7:09:43:e2:3d:50:7c:3b:8f:6d:c1:c5:
8e:d7:21:f2:44:94:f3:ff:3a:19:41:fb:d3:fe:f2:
bc:fd:5e:88:26:3b:cd:cd:7c:fa:24:1b:25:93:6e:
61:33:a0:40:46:b4:62:79:ac:94:b0:bb:7e:8e:eb:
df:fa:0b:f1:39:53:85:f1:30:fa:97:56:15:ae:df:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:11:9A:F1:CF:F9:06:AA:48:49:A9:0D:83:FD:EE:6E:3A:B1:3D:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2247de93-6f01-3a4a-be56-bea5cdc55644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:30:69:ba:3d:3b:af:86:78:82:93:cb:9a:43:e7:dd:9b:f2:
c3:d0:fc:3d:e1:5b:c9:c8:97:69:b4:d7:67:87:b5:8b:2b:fd:
8c:97:d6:c6:7e:60:c0:fa:ac:5a:94:34:8c:e9:12:81:a3:2b:
ec:57:c2:d8:1c:ef:01:f5:be:c0:80:3b:11:62:18:57:fe:b5:
99:bb:10:8c:33:67:96:d6:c6:fc:42:18:6c:17:7f:3f:a6:0b:
11:58:6d:4b:25:86:1d:a7:2a:d4:3f:da:e2:66:00:47:86:7e:
b1:a7:be:87:98:ef:68:b0:b6:54:c8:37:f4:48:9e:05:c4:1a:
ad:f5:2e:dc:bc:18:86:1a:82:b8:a0:d6:e0:9d:d2:c0:02:ea:
c4:b0:a8:b9:4b:9d:14:dc:ce:66:d3:d2:01:c9:7a:fb:c4:19:
91:c5:73:c5:28:4d:04:9e:5d:1a:c4:00:87:e5:03:a5:1d:54:
21:b5:78:d8:d0:9c:b0:be:c1:5a:ec:ee:cd:00:1f:29:98:38:
dc:1b:ea:ab:f6:45:b7:e3:0a:f8:32:b3:17:82:28:79:fe:52:
00:74:ac:14:4b:4e:d9:59:d6:00:ec:1c:82:11:65:a1:ab:4d:
82:e8:fe:d2:13:ad:57:2c:ae:a8:75:c6:03:6f:de:1c:62:b6:
b4:7c:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:00 2025 by rpki-client