Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68df1a15-1264-34e2-902c-b83805c6ba68.roa
File: 68df1a15-1264-34e2-902c-b83805c6ba68.roa (raw, json)
Hash identifier: ScLx5NS+onTGNKgiVOpWfWFPaHSXCIn4cvaEoZR1yYI=
Subject key identifier: DE:56:31:58:92:C7:06:62:25:EA:0D:9C:BA:68:B4:AC:D1:13:09:B9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E07AD05535B54610738100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68df1a15-1264-34e2-902c-b83805c6ba68.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.18.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:7a:d0:55:35:b5:46:10:73:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=49fe3dc7-d5ba-4642-864b-60c720327136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:a1:18:58:42:71:5d:e5:aa:e9:fc:a8:f6:
e0:34:f2:c0:43:fe:cf:6a:4f:22:b7:00:2f:36:70:
17:41:77:02:9e:e8:75:4a:9e:5a:79:64:89:14:f9:
e9:13:85:cd:a9:54:bc:eb:f0:90:8f:2f:17:8f:52:
27:83:9b:82:b2:8a:0b:05:8a:4e:5a:5d:3f:8e:7a:
f0:0b:eb:ae:af:57:62:c3:1b:34:02:8c:5e:f4:68:
6f:33:92:bd:05:c0:45:31:cf:cf:8a:aa:65:d1:de:
95:a6:b3:7f:04:bc:0d:60:ca:97:e1:88:fb:a4:f2:
08:6c:4f:34:46:6d:ab:b9:6a:18:f2:1a:94:fa:98:
67:27:1c:ce:19:b1:ce:af:ba:8e:75:33:ea:95:57:
d6:30:d5:9c:79:5d:eb:67:ab:4d:c9:5a:41:69:fd:
1f:46:7f:46:7c:21:2c:6e:96:a4:a4:ac:24:46:43:
3b:6d:16:cf:dc:21:40:d1:7b:e7:c4:85:20:1a:63:
35:92:55:81:6f:31:e6:43:dd:1a:cc:ae:68:fa:1a:
9f:bd:4b:d3:ac:3d:bf:aa:fa:7b:a3:c0:0f:4b:d1:
60:d6:9d:c0:60:cf:b8:48:ed:55:87:3e:a5:63:2e:
cf:ee:88:37:18:1f:89:54:aa:60:35:d5:0d:7a:19:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:31:58:92:C7:06:62:25:EA:0D:9C:BA:68:B4:AC:D1:13:09:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68df1a15-1264-34e2-902c-b83805c6ba68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:89:64:9f:3e:41:2b:a9:60:50:46:cc:7c:42:72:93:d2:ac:
47:da:38:f2:d2:10:da:0a:b9:6d:a6:79:9a:f1:bd:1f:86:11:
dd:c7:e6:5e:82:98:30:d6:fb:b3:1b:0f:05:3b:c2:32:ed:17:
56:c4:17:b8:20:f6:2b:82:b7:20:8f:22:42:7b:ee:3d:1f:e2:
00:d6:3a:4e:54:80:90:9c:2b:ed:d8:57:b4:67:2f:11:05:83:
4d:26:9c:de:aa:c8:d3:dd:70:5d:3d:bd:76:2d:2f:65:c0:85:
db:22:9a:cf:18:dd:0c:63:cf:47:a0:f5:3b:6a:79:ed:b8:41:
3b:84:d9:b0:e0:af:ee:2c:bd:9c:33:02:aa:82:83:df:a9:4c:
d9:6a:f5:e0:14:6b:1c:8d:70:27:a1:7a:32:19:2f:7c:6a:c3:
36:24:d8:f1:34:2f:26:59:37:b9:8d:63:75:e8:c1:26:34:ab:
4d:ab:e4:cd:dc:d1:c2:09:f7:98:95:99:35:45:f0:33:f2:2a:
9c:8c:c2:bd:2d:8e:be:e4:1e:9d:1f:42:db:f1:93:e8:0b:9f:
75:6c:fc:1f:16:ed:90:c6:94:54:7c:ea:a2:68:73:97:e1:e6:
39:b9:35:15:92:63:36:a1:bd:f2:d5:bf:58:11:6a:5c:cf:7e:
d5:cf:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:24 2025 by rpki-client