Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa
File: 37e2a1fd-6045-3704-9912-f89b40158f53.roa (raw, json)
Hash identifier: /OLeLtS+D8s5YJeWJAJQDRavdLyq7luIU9uNLA5qwr4=
Subject key identifier: 98:08:D6:CB:6C:E0:47:60:BF:95:C4:2C:6D:B4:D8:D1:F1:C8:B8:58
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B49909B309729C86AC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 98.20.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b4:99:09:b3:09:72:9c:86:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=0b311c96-d114-41d4-822d-bc30ba0106f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:4c:41:15:08:b3:5a:e3:93:d0:95:f8:d0:
26:ac:28:c5:e5:11:3f:11:b9:b7:67:93:47:16:20:
20:06:8c:b4:d3:98:af:e0:73:b1:3f:5c:7a:b5:48:
9c:0a:ae:14:8f:a4:9c:ec:85:67:ac:65:43:a3:79:
e7:63:f6:e2:05:5f:87:6c:96:39:66:ad:34:a2:bc:
31:35:32:22:09:3c:b5:85:2a:c1:74:31:ef:87:80:
e6:29:0d:0d:de:9b:b0:dd:31:d4:49:04:41:e8:0d:
81:9a:6e:1e:16:f9:ea:2d:65:a0:8d:41:1b:63:5f:
e6:40:0f:56:2a:b7:fa:98:57:b6:b3:f3:4d:d0:5e:
e7:f0:05:f8:57:6f:0c:1e:93:c3:f0:a8:8a:ad:7f:
32:cf:38:e8:e7:32:c5:ce:ec:0f:87:b4:7e:e5:a4:
7e:83:c7:83:23:b6:f4:7c:10:d3:ee:91:fc:56:20:
ac:45:80:e0:96:0d:81:11:c6:93:d5:0c:4f:6d:bc:
97:06:67:22:10:83:f0:7d:88:d2:da:eb:10:e6:6f:
bf:2e:a1:64:58:5e:14:f9:01:c7:36:ac:22:90:ef:
86:0d:9c:26:d1:e9:51:4f:ab:4c:91:9c:5c:bb:e3:
6e:f7:33:08:18:73:ca:66:bb:c1:99:f9:cf:7d:13:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:D6:CB:6C:E0:47:60:BF:95:C4:2C:6D:B4:D8:D1:F1:C8:B8:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:09:d3:fa:7d:c7:56:0a:e3:0a:98:f8:e5:ef:37:cc:8f:27:
5a:75:7c:91:64:c6:83:98:7a:af:6f:6f:e5:82:b0:bc:f9:88:
6a:14:1d:a7:85:e4:b1:ae:a3:47:1d:18:66:0e:a5:b2:9e:ff:
70:5f:15:e9:4a:82:93:eb:2a:68:69:94:09:63:14:62:8d:10:
0f:38:16:e1:89:8b:55:8d:e3:9e:81:eb:16:e1:16:69:ed:2f:
26:44:a1:f4:54:f7:eb:b0:f4:aa:86:b3:8e:cf:25:dc:b8:e0:
c3:48:45:ca:76:e5:f4:9d:6d:1e:6d:ad:54:57:83:0a:dc:4a:
0f:2f:4c:53:27:4a:90:7f:d5:45:63:e1:5f:ab:15:48:bb:da:
8a:fb:ea:73:0d:b4:a4:88:5c:01:a3:6d:0f:02:e8:51:96:7f:
61:68:34:d4:03:f2:f6:38:6e:b9:fb:2b:c9:42:37:18:c4:66:
3f:19:62:a5:b1:d4:4c:e6:6e:6a:b3:ea:15:78:19:ea:62:ae:
86:d2:a2:0e:bb:6e:dc:dd:83:ef:75:03:83:cd:cb:7d:a3:fa:
e8:80:dc:e0:7e:4a:eb:74:de:32:74:56:91:c2:c3:59:a2:12:
d0:1c:1b:ef:96:37:9b:53:b4:ce:1c:79:e0:c4:c4:ea:d8:16:
ce:f6:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:41 2025 by rpki-client