Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d06723-1f5a-3b3e-8d9b-8387f9464972.roa
File: 71d06723-1f5a-3b3e-8d9b-8387f9464972.roa (raw, json)
Hash identifier: RVzBw6N+/0cTkS8oqfX163lpYB6L2O6qnFGGqrUUCJU=
Subject key identifier: 52:BB:83:51:02:A2:D3:BA:D7:59:D7:2E:65:22:CF:A2:A9:20:74:5A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA6379DD2152FE07453880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d06723-1f5a-3b3e-8d9b-8387f9464972.roa
Signing time: Thu 20 Feb 2025 18:15:49 +0000
ROA not before: Thu 20 Feb 2025 18:15:49 +0000
ROA not after: Wed 21 May 2025 17:15:49 +0000
asID: 7029
IP address blocks: 98.21.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:63:79:dd:21:52:fe:07:45:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:49 2025 GMT
Not After : May 21 17:15:49 2025 GMT
Subject: CN=a4dd2c94-44f0-4af9-9b37-f7eef2d17d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:88:da:b8:13:55:79:5d:e1:c8:24:94:17:
17:82:7c:d7:29:eb:24:38:ec:7c:60:22:c6:13:38:
4f:40:ec:45:4d:ec:f6:c6:85:1d:70:2a:33:a0:f6:
c6:58:9a:7d:c4:5d:b8:56:66:3c:76:df:4e:ed:9f:
a4:93:45:6b:f2:c1:23:3a:b0:ab:da:a7:98:b2:54:
d1:cf:c6:1f:7c:90:c3:fe:f7:31:07:68:02:78:49:
43:4b:5d:5a:a0:f3:6b:0c:2a:1d:10:f6:6d:a7:f8:
27:3e:20:37:bf:2c:3f:ec:bd:03:5e:b0:bd:86:b1:
7f:c0:21:6d:11:e7:9e:47:48:05:69:88:fa:55:4c:
e1:88:d5:20:03:ba:44:32:fb:70:49:c1:36:81:58:
1e:c5:71:9e:25:7e:a2:1f:42:e3:0e:a4:fc:3b:44:
ed:ae:93:66:c3:5b:0d:3c:f0:63:27:44:85:f0:58:
6a:e9:db:16:21:09:c4:f9:e1:fa:ae:e4:bd:3c:c8:
c0:e7:03:10:4d:60:7d:49:05:94:99:4b:d2:b2:1f:
70:13:df:08:64:48:08:91:9f:d3:6d:f2:81:26:9d:
92:ce:d0:15:4f:60:a8:61:95:05:64:13:56:1e:be:
a0:df:89:8c:23:a5:ab:2e:ba:43:b8:89:15:12:57:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:83:51:02:A2:D3:BA:D7:59:D7:2E:65:22:CF:A2:A9:20:74:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d06723-1f5a-3b3e-8d9b-8387f9464972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ee:fa:7a:d2:48:78:01:b8:67:1b:e3:84:05:4b:7a:27:36:
b9:9b:43:95:bb:2d:27:01:b5:ee:e7:12:9c:bd:eb:e9:4d:4d:
37:0b:6c:e5:3b:d9:6f:a6:06:38:10:36:c6:19:55:68:80:24:
79:33:2c:ae:e9:12:a3:ba:20:02:58:81:8e:d5:ad:5b:70:e5:
34:8a:f5:3b:ac:39:9b:4b:79:fd:6c:d9:8f:55:a8:df:4c:2f:
2f:64:9d:0a:d1:17:25:6d:d3:a4:e2:7b:e0:68:7c:0e:8e:36:
1c:18:c5:d7:fa:4b:57:b2:c0:20:2a:2e:86:c5:64:3a:15:74:
0a:49:93:03:c2:87:ef:6a:c3:dd:be:52:8b:66:97:82:d0:c5:
a8:51:2a:5c:45:e7:04:f7:4a:a9:57:ff:e4:32:78:59:5d:91:
de:de:5a:fa:c2:4c:6e:24:17:01:50:ef:11:97:e4:03:f0:10:
a2:7d:6f:2e:09:5b:72:38:0e:95:35:6a:0c:03:1f:85:6b:64:
a8:ed:41:02:f1:9c:a8:4b:dd:31:73:41:f1:d4:b4:24:eb:14:
6b:16:d8:6f:d2:1a:ce:dd:61:65:73:d4:ce:d7:b0:36:97:93:
59:51:9b:51:22:a6:bc:19:ff:46:c4:d1:b1:3d:83:bd:74:22:
20:f3:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:31 2025 by rpki-client