Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa
File: 831a6028-7886-3a30-8cc8-4d6dc7086da1.roa (raw, json)
Hash identifier: LJ4U7MJIaJNzBSUYYy3+6snlYKo4+11Ehr4cES9MmXo=
Subject key identifier: F0:4A:5F:26:1A:B0:9A:55:1B:F4:4C:7B:C2:FE:5D:3E:DA:36:93:75
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA2239065CB11CA1A5ED00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa
Signing time: Thu 20 Feb 2025 18:15:18 +0000
ROA not before: Thu 20 Feb 2025 18:15:18 +0000
ROA not after: Wed 21 May 2025 17:15:18 +0000
asID: 7029
IP address blocks: 98.18.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:22:39:06:5c:b1:1c:a1:a5:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:18 2025 GMT
Not After : May 21 17:15:18 2025 GMT
Subject: CN=2df2437c-b905-4b8e-9b55-b92593d08cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:ce:dc:a4:c1:c5:2b:69:8c:57:11:3b:c3:
23:43:3a:01:2b:e9:82:98:05:cc:6e:da:61:c2:65:
09:5f:c6:81:25:c6:84:c5:7d:71:b9:c2:6a:9d:48:
2f:14:fb:90:59:5c:94:ef:cb:7f:45:16:84:9e:7f:
c2:20:2d:04:77:82:52:8b:b0:cd:98:2a:8c:8a:f5:
2d:f4:56:4e:60:26:d5:8f:9b:c8:fd:0b:06:d6:f5:
c9:1b:63:22:f7:df:45:7c:3a:4f:65:4d:94:97:a8:
f4:15:97:fb:05:24:0a:f0:01:d8:64:2e:b0:a3:b8:
23:bd:c5:90:fb:ce:d6:74:9b:02:72:69:59:8a:d5:
be:aa:5d:78:98:f4:f4:29:98:86:ff:3a:1c:54:85:
fe:cf:59:e7:d2:bc:5f:14:c6:4a:b8:c9:cf:fb:d5:
ec:f9:97:ea:14:24:8a:b4:7f:e2:64:a2:66:60:2b:
d2:15:c9:96:2a:fe:b6:ff:f7:79:63:a7:16:5f:a2:
4d:56:be:ae:c0:8f:db:31:77:fd:e2:80:e8:0d:47:
b5:40:19:41:05:9e:b9:89:a6:ae:18:55:7c:5d:82:
ff:e7:84:99:39:ca:2c:48:69:9e:27:1c:ae:a8:6d:
87:ce:78:8a:8d:8c:56:96:03:11:3e:14:57:b2:98:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:5F:26:1A:B0:9A:55:1B:F4:4C:7B:C2:FE:5D:3E:DA:36:93:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:fc:b3:07:9d:8b:33:46:46:f0:a9:3c:02:e2:8f:c4:0e:38:
67:69:78:4d:c7:96:ea:e4:94:34:64:8f:d0:59:72:8e:7a:2b:
88:dd:21:f4:ab:69:4f:9f:97:61:5e:9e:bd:49:30:af:5d:25:
36:ee:09:3d:8a:b0:ed:4b:75:49:46:2c:69:71:8a:a6:65:04:
c7:dc:5f:6b:ca:38:eb:c6:8e:21:75:7b:a4:e4:d9:26:0d:76:
e2:c4:d4:fd:04:b7:02:4a:36:8e:a5:74:9d:6b:63:fa:d6:64:
85:ac:fc:02:d0:d2:f1:7e:5b:b0:bb:ec:17:97:da:55:83:eb:
97:77:72:2b:36:be:aa:c0:63:9e:60:9e:fb:ca:e5:99:5d:e4:
9f:8d:a7:65:b8:88:cc:b7:20:3d:17:d5:18:02:1d:70:5b:ac:
e0:be:7b:da:ca:10:9f:e3:0e:d8:f1:9a:a4:e0:65:f6:d0:95:
a8:e6:f7:09:f1:e1:fe:fa:2b:c9:0f:63:36:49:1d:5c:4d:ac:
64:ac:9c:16:3e:17:fd:9d:59:b6:a1:a6:dd:01:1b:3e:e2:92:
be:92:70:49:b4:95:96:b2:20:1e:66:c0:2b:ad:d1:1d:64:f6:
46:be:e6:ca:f7:43:d1:6d:96:e4:c7:85:40:33:57:50:6f:52:
e5:89:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:43 2025 by rpki-client