Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c213a0b-8be6-3c5e-8c63-534a5ffc88e3.roa
File: 5c213a0b-8be6-3c5e-8c63-534a5ffc88e3.roa (raw, json)
Hash identifier: 1FKc04nETFt/SzWDGAR1717TGA06Rp0sJGvf4TMwoa0=
Subject key identifier: 6D:54:61:BB:DE:49:7C:DD:D6:71:62:14:A2:3B:85:14:B7:5C:5C:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858493AFEB54067FD2E28A6396900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c213a0b-8be6-3c5e-8c63-534a5ffc88e3.roa
Signing time: Tue 18 Mar 2025 16:03:55 +0000
ROA not before: Tue 18 Mar 2025 16:03:55 +0000
ROA not after: Mon 16 Jun 2025 16:03:55 +0000
asID: 7029
IP address blocks: 98.19.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:fe:b5:40:67:fd:2e:28:a6:39:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 18 16:03:55 2025 GMT
Not After : Jun 16 16:03:55 2025 GMT
Subject: CN=781d9518-32fd-4ce1-8cf5-22d7dc097f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:fa:8c:68:64:16:63:4b:83:62:f5:b2:f4:
0e:69:aa:86:8c:20:34:11:92:2a:0f:52:5a:f8:eb:
fa:bc:ff:08:93:88:b7:eb:cc:d3:2e:7e:5e:c4:49:
05:f3:d0:a6:2a:d5:3d:5d:51:c9:23:dc:17:01:08:
41:87:57:1e:f6:ba:86:89:c4:f4:3c:87:f1:ea:c3:
2d:0b:62:00:cf:00:2a:99:64:22:0e:85:42:12:17:
05:7a:2e:2d:98:86:01:6b:32:e0:23:88:38:c0:84:
5e:ff:74:9b:7d:d8:5b:77:07:0e:ab:4c:2b:02:73:
1c:70:53:d5:03:69:6e:eb:a6:56:e7:0b:32:4f:47:
73:bb:3b:c1:a7:e9:b3:87:cb:5d:ca:b2:10:57:8f:
8c:df:e3:98:3d:4a:7b:6d:00:ee:d9:aa:fe:cf:b7:
91:84:02:22:e8:e6:4a:7b:6f:a4:cc:3b:b5:8d:78:
55:34:68:ad:03:fe:1c:74:d6:e0:82:99:20:1a:3b:
c7:ba:11:3b:73:5c:78:2b:04:db:8d:69:d9:62:88:
ac:58:18:84:19:6d:3a:b6:f2:9f:9a:38:22:7a:45:
55:66:cc:c8:e9:41:35:e4:c6:28:9e:c3:9f:fa:fa:
b7:63:5f:3f:f3:1f:08:24:25:42:65:f9:16:9c:fa:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:61:BB:DE:49:7C:DD:D6:71:62:14:A2:3B:85:14:B7:5C:5C:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c213a0b-8be6-3c5e-8c63-534a5ffc88e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:67:be:24:24:ed:e4:cc:af:b1:47:55:3d:5c:be:74:d5:34:
7b:a3:34:34:69:8b:3c:f6:da:d7:c7:fd:3b:d8:2c:4c:5e:10:
78:4f:96:2a:c4:46:25:a6:72:08:cb:b0:38:b5:45:80:04:d8:
16:7f:84:35:02:28:85:a3:6d:7e:b7:94:0b:00:47:6e:5e:9a:
2a:d9:6e:9e:4a:fd:d2:e5:d8:bc:24:66:a1:22:7f:9f:d2:76:
51:cc:b1:23:2a:d7:93:2d:5a:d3:68:4f:cb:84:2a:4d:36:3e:
3c:10:73:cd:dd:64:61:8c:b3:ae:6c:7d:43:be:67:07:76:27:
32:03:3f:24:2f:2b:ad:68:17:57:ee:f0:ae:1c:9e:2a:0d:07:
3a:1c:8a:f0:7e:1b:3a:d2:4b:ad:fd:e6:f6:e5:a1:cd:b7:f4:
e3:15:83:fb:60:46:08:c1:14:37:0d:03:36:59:52:e1:12:c9:
15:27:c9:30:c6:bb:60:28:e6:f7:fa:e3:2d:3f:10:57:b9:bc:
74:18:3d:50:f0:0d:69:d7:6a:2f:67:78:d7:cf:21:a2:08:4d:
04:cc:40:0b:f3:d5:b6:91:eb:4a:b6:e5:de:53:01:35:b8:1a:
e5:e4:79:b5:81:7d:0a:11:62:18:3c:fa:87:5d:e0:c3:2f:50:
95:ca:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:32 2025 by rpki-client