Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa
File: 411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa (raw, json)
Hash identifier: 2L6f4suw7qiv4o0PwEURG3YPuFPJT5ocQnBj7Cf6+N0=
Subject key identifier: 6B:0A:0B:C0:9E:E8:58:AD:7B:F9:B1:CE:A5:34:D7:32:15:85:86:D8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15500D14FD99013EB90A000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.21.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:00:d1:4f:d9:90:13:eb:90:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=a3a47ece-5fa7-460f-b257-6bdddf0360d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:ac:17:92:da:cf:fc:dc:bf:55:69:c1:53:
76:37:89:56:f7:3c:74:ab:7b:db:d6:f6:4f:c0:d8:
8a:3e:44:86:03:a5:43:7a:6f:47:4c:a0:68:29:0a:
c1:9f:da:d8:a1:38:ab:0d:94:2f:72:2c:57:d1:2c:
86:99:0a:b0:49:88:f8:99:d9:33:48:36:95:db:05:
62:ca:a8:9b:71:91:43:5c:07:d8:79:08:9a:86:24:
f0:f6:a1:58:48:8d:a0:5a:d0:d5:eb:62:f5:ac:40:
dc:bd:5d:12:2d:68:b5:34:86:68:c9:55:ec:4d:17:
2c:3a:86:7d:fe:ba:7c:77:0b:be:f8:81:d6:20:b5:
b9:4b:35:df:2d:7b:cd:1c:23:27:2a:b4:e8:09:ab:
65:36:a0:fc:f5:e0:5e:0a:9e:c1:23:4d:75:f7:5f:
29:e4:ec:fe:93:b7:34:18:59:45:74:03:16:35:fd:
f3:2a:8b:da:67:2b:22:ff:d6:95:1d:ba:9e:8f:61:
d5:a9:56:54:29:b6:47:b3:d6:4f:10:05:7a:8f:cc:
f4:2d:92:48:e1:8c:38:7a:84:0c:0d:57:90:d4:93:
8c:2a:28:60:59:58:14:1f:03:8d:c9:29:5b:97:98:
b7:f8:3f:e3:ff:da:b5:70:f1:d6:c8:e8:d3:30:4d:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:0B:C0:9E:E8:58:AD:7B:F9:B1:CE:A5:34:D7:32:15:85:86:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:46:fd:d9:a9:b4:cc:eb:62:a7:c3:aa:da:87:99:2d:9b:fc:
e9:4c:28:af:99:c6:05:cc:b7:04:d8:73:37:ec:a1:1a:59:e9:
32:9c:b3:3f:db:9a:f1:3f:f9:fe:52:12:96:d2:d8:c6:2a:69:
1a:4a:57:0f:64:06:0b:8b:3e:91:76:6a:79:01:54:07:23:34:
1d:d8:7f:ba:58:d8:3a:8f:1e:bf:b3:06:ca:27:a0:d5:ba:ed:
bd:69:ae:42:e3:bc:82:87:ba:a4:fa:3c:c0:d4:60:7b:27:76:
23:f0:e1:83:05:f3:14:32:7a:83:6f:eb:7b:4f:ec:06:7b:dc:
52:0a:20:43:84:77:13:a6:5c:d4:da:d8:a0:54:6a:62:0a:78:
c3:c5:0d:8b:d5:d1:a5:6c:f1:9e:15:7b:bf:04:2e:79:19:e8:
e6:6a:3a:9f:c1:e2:3d:b6:a6:3c:b2:ce:dd:72:e9:3f:61:71:
fb:5c:87:b3:ac:f0:ac:4c:d0:bb:cd:65:fa:93:da:17:83:2d:
bb:98:6c:dd:0b:09:0c:ca:83:8d:01:c4:42:45:c5:1b:ca:62:
fe:3a:fb:75:e8:8f:92:d4:9a:44:4b:84:1b:a4:36:cd:19:d4:
74:42:f4:92:93:2d:90:29:ad:1c:9d:cf:9e:e3:1d:e5:e0:49:
33:45:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:40 2025 by rpki-client