Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25ee4665-2ed6-37df-9494-a1390465154e.roa
File: 25ee4665-2ed6-37df-9494-a1390465154e.roa (raw, json)
Hash identifier: 2nsaIZ4nwJob0UorJWxLD7MwIr0Cmh/esuGir+UyhME=
Subject key identifier: 8E:59:B0:F8:DD:E2:9F:28:2A:2C:22:80:0D:1C:5D:F7:A3:20:DD:EA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289DD9195F65E3A10CB4200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25ee4665-2ed6-37df-9494-a1390465154e.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 98.22.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:dd:91:95:f6:5e:3a:10:cb:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=9a35fd5a-ac56-44c3-9981-0ddfe3590fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:d2:0e:67:e7:4c:95:b2:13:be:b3:d4:d0:
e1:88:b9:8a:7e:79:eb:65:db:80:ed:42:7c:68:cc:
da:80:63:f9:99:96:1e:70:15:a0:0c:80:be:c3:1a:
89:7f:ba:b5:76:a7:66:b8:cb:15:89:bc:8b:a3:bc:
51:55:3f:2c:16:90:06:e9:87:06:ca:7f:7c:b1:c9:
06:89:1c:c9:ae:76:58:a0:5a:b3:2a:14:df:43:37:
f0:7b:5d:3e:04:88:62:a8:89:db:8c:46:85:1c:22:
9a:0c:1f:05:19:41:1a:df:98:a5:cd:4e:e2:6e:32:
24:33:ea:7c:d8:72:17:91:f4:bd:93:ba:28:85:6d:
92:14:f1:b4:fe:1f:d4:3d:a6:a8:ee:fc:ca:53:78:
e4:96:e3:ca:90:eb:44:c9:59:42:b6:19:c1:c5:f5:
de:47:d8:24:68:da:4a:4c:ce:26:e7:c2:b5:43:8d:
6a:b2:8d:9e:96:b8:23:8a:38:85:8e:47:45:d1:8d:
2d:03:a8:07:61:a1:d3:32:e8:80:14:17:5b:e7:04:
48:4b:dd:f2:4d:4c:1c:ed:d5:9f:1f:e4:c2:c2:89:
15:ef:cc:da:74:28:a4:8e:c5:1c:54:d1:d0:e9:2e:
d4:fc:d8:a5:5c:c2:d8:dd:ff:39:03:79:36:47:22:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:B0:F8:DD:E2:9F:28:2A:2C:22:80:0D:1C:5D:F7:A3:20:DD:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25ee4665-2ed6-37df-9494-a1390465154e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b6:44:3e:a0:eb:a3:41:39:71:75:3f:4a:2c:b9:50:d6:77:
4a:a1:d9:58:d7:55:9e:b6:e5:f6:9d:a4:d3:d7:50:4f:49:16:
d3:07:17:f0:b9:09:d4:a3:6d:85:a0:45:27:9c:c0:fc:cc:69:
dd:3b:d4:13:73:d7:c8:a2:95:a4:a2:6f:dd:f3:7b:ca:9e:16:
4a:5a:23:9b:bd:b6:8d:a1:ce:17:c7:5b:e9:8f:9d:50:78:78:
f3:95:95:24:8f:12:20:e4:63:33:32:98:fc:82:ae:91:ff:3d:
58:7c:f7:25:cc:97:ee:62:a9:85:c9:00:2e:7f:d7:a3:a0:39:
ce:c4:aa:86:1b:a4:b3:0c:70:80:d6:a2:1c:61:2b:48:12:30:
0a:e5:71:b2:4a:69:38:0c:74:97:7c:be:60:fe:46:b5:32:f9:
10:9e:fc:a7:9c:a3:db:a4:f1:41:92:2f:d5:8e:0e:ff:7f:ac:
8b:4e:09:85:8f:bf:71:02:6b:17:1f:2a:7b:70:4c:af:a5:8a:
4d:b8:72:4e:5b:e5:97:c6:79:9b:ff:7d:0d:d0:8e:a9:1e:22:
d4:b6:36:fe:59:5d:d3:66:f7:cc:ac:af:60:be:ec:57:03:79:
74:b0:1f:d1:e6:e7:11:cf:e1:d2:15:9b:90:4a:74:a1:82:3b:
94:0c:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:35 2025 by rpki-client