Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39b5443a-d280-3a9e-89fe-e9addbfb0bd2.roa
File: 39b5443a-d280-3a9e-89fe-e9addbfb0bd2.roa (raw, json)
Hash identifier: kArg9QxcnFDUXyMpuqV+GdrXjSWtprZp32vMUOyDYRs=
Subject key identifier: 6F:83:25:E3:B0:C9:DE:61:9F:C8:03:02:50:D2:7E:82:59:15:49:F7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858415B4A618B8949CB1D5FFAA5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39b5443a-d280-3a9e-89fe-e9addbfb0bd2.roa
Signing time: Sun 26 Mar 2023 12:00:00 +0000
ROA not before: Sun 26 Mar 2023 12:00:00 +0000
ROA not after: Mon 19 Mar 2029 04:00:00 +0000
asID: 7029
IP address blocks: 98.17.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:5b:4a:61:8b:89:49:cb:1d:5f:fa:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 26 12:00:00 2023 GMT
Not After : Mar 19 04:00:00 2029 GMT
Subject: CN=4bfa9cda-0e2c-4792-91e9-69cc150fb3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:e8:2a:97:a1:a7:6b:24:5d:a0:e7:ac:a0:
91:d1:a3:26:d7:f8:e9:ef:ad:a9:94:9a:63:15:ac:
8d:ad:93:40:e4:28:9e:16:64:f8:24:a5:e7:bc:4e:
ce:8e:40:66:a6:d4:28:8f:82:f6:00:a6:82:4b:c2:
f5:74:a2:2e:e2:30:42:9a:bc:a9:ce:42:6f:c6:cb:
fa:65:77:a2:09:0e:2b:fc:c1:c6:0d:cf:15:94:15:
76:3d:d7:5e:29:67:6a:44:3b:cb:a3:20:7a:4a:11:
d3:18:1c:71:8d:03:18:53:43:19:ab:fe:d8:ef:ff:
70:b3:d5:2d:ad:76:a0:a1:05:83:4f:25:de:1f:4a:
c4:f3:25:d3:e3:07:09:14:d2:33:05:1d:e9:80:27:
5a:9e:48:5d:41:55:5e:8d:8b:77:af:03:ab:d6:ad:
76:bb:e2:08:21:56:d7:45:33:d5:3f:0f:2c:67:97:
30:0f:2d:be:60:de:f4:fe:d4:78:d5:09:56:03:75:
a8:aa:a5:f4:85:57:b3:22:fa:49:64:f6:6e:a6:94:
75:ad:da:74:91:ba:2e:1a:c6:a1:6e:fd:22:67:3f:
f2:b2:be:65:ad:f5:63:fb:84:b7:ae:66:da:dd:60:
7d:d4:1d:fc:32:01:22:37:3f:5e:fe:0f:ef:ca:c6:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:25:E3:B0:C9:DE:61:9F:C8:03:02:50:D2:7E:82:59:15:49:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39b5443a-d280-3a9e-89fe-e9addbfb0bd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:04:fc:b0:11:a0:98:b2:d2:44:29:61:a3:fd:ee:70:bd:52:
41:fc:6b:05:e3:0f:0d:21:d8:28:17:85:8c:90:17:ea:42:7b:
a9:37:2e:d5:14:23:b3:3e:fb:7a:9e:3e:f5:47:3b:1c:46:ab:
73:64:44:fd:8c:08:ac:32:43:e5:2e:c2:ad:cc:59:bb:d8:83:
f1:51:36:0d:eb:25:17:ea:c8:fa:ef:68:06:a0:e2:0d:b0:82:
a8:90:1f:ef:53:03:cd:6c:6d:9c:bf:e4:01:88:42:49:f9:57:
1d:0a:cd:05:18:46:c6:d7:ca:9a:8b:ef:4d:76:6d:7f:ab:f6:
1b:32:13:9b:88:08:46:50:80:86:58:d5:28:0d:71:5b:3d:e3:
f5:ef:88:79:93:c7:30:f2:4d:f9:25:4d:e7:9a:84:e8:6a:83:
1a:8a:a7:3c:3e:d0:b9:53:2d:68:84:1d:61:eb:23:a5:2e:0c:
09:7c:03:c7:66:da:fb:cf:31:0e:c3:fe:76:45:94:2d:e4:24:
6f:80:3b:bd:90:88:02:01:f6:65:10:77:80:01:80:b9:87:25:
3d:4e:0a:11:0c:e1:c3:db:2f:24:ba:5f:1f:60:52:e6:74:9f:
f1:92:2c:04:8f:ea:9d:0c:fc:ab:be:ab:27:ff:fb:34:d0:3f:
a6:d6:96:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:02 2025 by rpki-client