Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa
File: 4923db70-c81a-34e2-a88f-f0e2426017c0.roa (raw, json)
Hash identifier: X7VC6L+w6BF1Dpj02CTv/5UBAmS4FDBaUutpNjnGv6s=
Subject key identifier: 42:9D:33:89:19:7B:75:18:48:7E:14:90:BB:B2:1C:2A:11:E5:E8:1C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D71634D5AE584335CDAE200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.22.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:63:4d:5a:e5:84:33:5c:da:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=d797e78f-5783-4a2f-8a3a-1c293d934c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:60:3d:0d:8d:45:d4:8b:4e:79:90:0a:f6:
2e:59:82:f7:7b:ed:6e:af:fa:05:d6:42:49:60:ce:
23:38:1d:35:a9:0f:eb:68:b0:df:e7:07:2f:75:28:
18:e9:99:1b:47:63:b5:9b:1f:fd:06:00:ea:57:dc:
30:9d:57:ce:62:5f:e7:62:99:1c:49:89:19:a9:0d:
c8:50:8f:cc:01:4c:45:34:54:66:8a:b7:19:14:31:
c8:01:1c:f3:0c:38:1e:ba:d0:e7:dc:85:62:cb:b2:
e7:5e:e0:38:b6:f5:09:39:7a:65:66:23:cc:f3:07:
31:00:17:a4:30:1e:db:db:b6:79:9f:b2:30:98:4e:
e7:e0:1c:f0:bc:4c:38:f5:51:68:ae:bb:f9:67:75:
5f:b1:ae:60:d1:e2:09:40:2f:03:8a:f9:89:f7:4a:
06:8e:08:29:69:eb:e9:e3:fd:ed:6c:97:a9:87:cb:
e0:67:cc:8d:8a:93:0b:42:06:f3:8b:c4:9e:1d:34:
87:af:de:ef:27:7a:e1:73:ff:66:62:6f:c8:cd:d0:
74:1c:68:7f:63:55:57:5b:d5:e7:b4:05:05:29:74:
33:3b:5c:1c:8c:fe:fd:f9:61:d6:65:a4:25:23:03:
eb:10:3e:b5:24:3f:26:45:e0:43:57:0d:e9:8a:eb:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9D:33:89:19:7B:75:18:48:7E:14:90:BB:B2:1C:2A:11:E5:E8:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c1:58:43:3f:dd:fa:c8:cf:f7:1f:d2:98:19:fa:d8:c6:b5:
55:5f:21:a7:12:e9:cb:11:4e:53:6d:a0:38:5f:69:84:2a:ee:
e1:b3:81:4e:f6:d2:e9:e8:21:65:b7:ad:64:33:b6:ab:06:7f:
37:02:cb:a4:06:f8:e3:d4:9f:28:80:a3:4b:e8:fd:14:bd:01:
a2:8d:29:e8:20:c2:52:b5:e3:eb:41:51:26:9c:b5:3b:b3:26:
7a:5e:a8:d9:09:e4:47:c7:13:f9:43:6b:ef:c9:be:87:67:75:
d2:d9:cc:79:86:0a:cd:b6:ef:36:9b:51:fc:15:af:ad:9f:8c:
d0:be:ba:a5:65:4d:37:20:32:52:ba:12:56:00:d1:1f:3b:44:
cb:20:93:6a:b1:1d:a7:97:0b:e8:6f:f9:3d:00:c7:92:3f:17:
3e:1c:a9:0d:6d:96:a1:15:82:9d:43:01:bb:76:09:88:60:59:
3c:ca:dd:46:a2:0b:08:81:f8:29:93:98:1e:ae:39:c8:a4:19:
dc:9e:53:37:94:a7:e4:58:e5:a8:ec:d3:4d:a9:75:a0:97:51:
55:29:91:78:50:85:10:e7:68:5f:90:a2:f4:eb:96:9d:1e:1c:
5a:e2:5f:49:94:43:5d:b8:27:cf:b6:bb:c5:45:e3:b6:6c:72:
bb:d7:4d:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWNNWuWEM1za4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDc5N2U3OGYtNTc4My00YTJmLThhM2EtMWMyOTNkOTM0YzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcZgPQ2NRdSLTnmQCvYuWYL3e+1ur/oF1kJJ
YM4jOB01qQ/raLDf5wcvdSgY6ZkbR2O1mx/9BgDqV9wwnVfOYl/nYpkcSYkZqQ3I
UI/MAUxFNFRmircZFDHIARzzDDgeutDn3IViy7LnXuA4tvUJOXplZiPM8wcxABek
MB7b27Z5n7IwmE7n4BzwvEw49VForrv5Z3Vfsa5g0eIJQC8DivmJ90oGjggpaevp
4/3tbJeph8vgZ8yNipMLQgbzi8SeHTSHr97vJ3rhc/9mYm/IzdB0HGh/Y1VXW9Xn
tAUFKXQzO1wcjP79+WHWZaQlIwPrED61JD8mReBDVw3piusFrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKdM4kZe3UYSH4UkLuyHCoR5egcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkyM2RiNzAtYzgxYS0z
NGUyLWE4OGYtZjBlMjQyNjAxN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjBWEM/3frIz/cf0pgZ+tjGtVVfIacS6csRTlNtoDhfaYQq7uGzgU72
0unoIWW3rWQztqsGfzcCy6QG+OPUnyiAo0vo/RS9AaKNKeggwlK14+tBUSactTuz
JnpeqNkJ5EfHE/lDa+/JvodnddLZzHmGCs227zabUfwVr62fjNC+uqVlTTcgMlK6
ElYA0R87RMsgk2qxHaeXC+hv+T0Ax5I/Fz4cqQ1tlqEVgp1DAbt2CYhgWTzK3Uai
CwiB+CmTmB6uOcikGdyeUzeUp+RY5ajs002pdaCXUVUpkXhQhRDnaF+QovTrlp0e
HFriX0mUQ124J8+2u8VF47ZscrvXTXA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:45 2025 by rpki-client