Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa
File: 5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa (raw, json)
Hash identifier: NWFSeLHPuyi83EbVtmUQdK6JbonIYAPjWodxRfoGIwM=
Subject key identifier: FF:C4:58:1C:A1:DF:C9:D5:E6:FA:CB:B9:EC:DD:FD:D8:29:60:D2:52
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AAD09B0BD23421E1494880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa
Signing time: Thu 20 Feb 2025 18:16:41 +0000
ROA not before: Thu 20 Feb 2025 18:16:41 +0000
ROA not after: Wed 21 May 2025 17:16:41 +0000
asID: 7029
IP address blocks: 98.16.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:d0:9b:0b:d2:34:21:e1:49:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:16:41 2025 GMT
Not After : May 21 17:16:41 2025 GMT
Subject: CN=efbdf397-da14-4626-a0f4-ac231b7fe2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:a6:67:81:2b:d3:88:a6:c3:12:61:89:27:
ad:b8:96:eb:7c:17:92:d4:41:90:22:6c:52:18:67:
21:93:79:a5:27:0d:fa:0c:30:5b:de:da:9c:7b:6d:
3d:58:c1:ab:62:cb:b1:22:73:85:b9:b2:8c:46:61:
52:76:86:5a:56:f1:a6:68:89:8d:03:ca:ed:64:9e:
96:17:53:49:da:47:63:8d:5a:85:58:16:ac:cb:7e:
57:67:cb:9e:9a:5d:e9:9b:26:b5:ff:98:bb:d0:18:
45:73:70:7d:62:bd:14:a8:66:5d:71:7c:ad:a5:86:
22:4c:aa:dc:71:f7:35:1c:10:12:4b:c2:2c:53:5a:
bb:9a:94:84:1f:79:ad:00:07:dc:ad:be:21:11:52:
b9:c1:25:e7:b1:50:53:46:a6:c5:97:98:8c:5f:f7:
b0:56:0e:a6:e4:12:f7:ec:00:c6:af:85:cf:a2:15:
d3:23:88:0d:d0:f3:95:ae:0e:16:9d:20:c5:a4:32:
59:f3:53:b5:5b:14:77:2b:b4:97:e8:fa:f8:b4:71:
39:a8:c9:c4:f9:ce:0e:ee:4a:a4:c7:6a:08:47:bd:
37:25:ce:73:2c:9c:81:18:79:f0:4d:6c:4e:3a:16:
b0:49:3f:2f:4d:cd:f7:cd:c2:9c:63:aa:74:8d:cd:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:58:1C:A1:DF:C9:D5:E6:FA:CB:B9:EC:DD:FD:D8:29:60:D2:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:24:3e:24:f8:27:f8:d2:36:53:22:3e:7f:45:1b:68:6a:2e:
02:9d:01:c4:5a:46:d5:ef:9e:28:47:af:8f:cd:ca:7b:5e:84:
dd:dd:cc:1e:f2:27:8d:9a:cc:73:58:9e:e7:78:cc:3a:d6:23:
72:0b:03:f3:28:2d:84:60:dc:3c:c6:35:22:62:7f:ea:8e:51:
2b:92:cc:40:2a:3f:ac:86:7d:c7:2d:d0:e8:21:e5:d4:0d:52:
14:c7:11:c6:d5:5a:54:dc:76:64:e3:ce:21:88:3e:9a:80:6f:
21:a0:55:74:8f:16:46:9e:a8:7e:ce:2b:b1:a7:5f:f9:76:76:
d0:16:3f:f0:42:32:e4:ed:7c:c9:b1:e1:53:e9:e8:f7:02:73:
f9:65:1e:03:c2:cc:dc:17:04:53:34:74:6a:cb:c2:a3:5c:eb:
cc:1d:e6:94:1d:06:97:5f:6f:8a:b0:d3:30:80:a2:a0:2d:55:
ec:58:82:d7:05:5a:b3:00:02:54:d3:5b:53:b0:8c:04:33:ca:
d8:d7:02:94:0d:a8:6b:66:35:69:21:98:9a:5f:d4:28:b9:b6:
68:1f:24:2d:d2:a1:41:b0:58:d8:c4:e9:b8:5a:ba:24:6b:5b:
fb:03:00:ee:41:17:78:cf:63:53:68:04:70:51:9c:84:61:ac:
2d:66:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:29 2025 by rpki-client