Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88eddf2a-9800-3e84-bf8f-6285fd020ab6.roa
File: 88eddf2a-9800-3e84-bf8f-6285fd020ab6.roa (raw, json)
Hash identifier: HBB3mlM3GNIx+eVLP5+8zrlw6EHHtfdl1tE+zpCmWyw=
Subject key identifier: 78:01:79:C6:CB:6F:21:B1:85:E0:4F:1B:9C:29:10:35:33:03:D3:39
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E07B2F390B1F0054A06980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88eddf2a-9800-3e84-bf8f-6285fd020ab6.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.18.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:7b:2f:39:0b:1f:00:54:a0:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=64f3ecd7-0246-4014-b957-c2faf6aaa872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:63:8a:fc:30:4c:74:0b:97:fa:bf:00:85:
e6:66:f3:5c:d6:72:dc:55:10:fc:86:02:d7:de:13:
63:6e:d3:1d:d2:3f:94:58:68:ba:4a:66:59:67:a4:
1f:8d:e3:75:6a:a3:4c:c3:dd:98:6c:8c:4b:ee:02:
fd:a9:47:41:61:89:73:07:a9:93:d4:3a:c3:32:c9:
af:59:66:60:33:ad:0f:ae:f9:f5:fa:cd:3d:8c:0c:
3f:3e:d0:fb:4c:1f:97:80:46:36:0f:eb:3f:56:fd:
d8:5c:11:14:02:b1:98:ed:53:e1:9a:b2:25:0d:c2:
90:18:0f:0b:ed:40:1f:86:4e:0c:a6:cb:2f:d4:60:
19:83:73:3c:f7:74:a4:04:d0:57:da:6f:10:83:69:
b6:d0:9a:7b:04:72:0b:38:b1:42:ea:b7:1d:47:ab:
6c:8d:29:76:9d:49:4f:56:7b:0d:07:04:4d:26:cc:
8b:3a:9d:03:cf:40:cb:8a:1e:a2:40:9c:f9:81:d5:
4e:9e:b3:d0:96:9c:80:c7:1c:c0:11:3e:cf:73:22:
39:f6:a8:97:d4:1f:d1:3e:76:01:5c:27:d8:4c:79:
53:79:65:af:de:0b:e9:15:1e:48:f6:f9:ab:1b:a9:
44:df:73:ff:9b:d5:53:06:28:13:0e:d8:fc:ab:d4:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:79:C6:CB:6F:21:B1:85:E0:4F:1B:9C:29:10:35:33:03:D3:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88eddf2a-9800-3e84-bf8f-6285fd020ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:e4:0f:2e:38:06:15:13:5d:e0:97:0b:97:02:e8:ca:7f:a0:
db:32:42:45:40:b5:6c:dc:b1:3c:8c:c1:b4:55:0d:36:da:d0:
96:fc:15:63:11:a8:c7:8f:72:84:2f:f0:ae:3b:52:4e:65:f9:
0d:4a:75:14:3c:36:7b:e5:87:63:6e:c5:3a:b2:58:a0:2e:0f:
71:8c:52:eb:fd:e6:f3:e5:32:42:80:43:20:5a:57:d6:57:3f:
39:f5:cd:e5:cb:ae:1f:49:59:5b:c8:61:eb:37:86:59:35:dc:
0c:d7:eb:68:13:cc:45:5c:66:8f:ad:6d:67:bf:fa:6f:dc:21:
3a:17:f7:85:37:3d:ad:5a:f6:70:ce:b3:37:c2:5f:7f:9d:94:
c0:06:f7:b5:bc:3c:5b:b6:b5:ef:89:ca:01:57:23:a4:59:29:
9d:11:75:01:d9:8e:5e:c6:b3:8e:6b:e9:d3:a2:6b:f2:58:0b:
42:bf:15:4a:d9:2b:50:1e:96:8b:87:91:74:fe:46:2c:88:22:
8d:b7:93:d9:1f:b3:f9:28:9b:dd:65:67:08:65:c2:44:53:e2:
2a:7c:25:9b:3e:f8:27:c0:be:3d:d8:27:47:6d:6a:d4:8e:55:
99:f2:0e:b2:fb:da:41:ca:8d:24:15:2f:8d:ec:cf:ed:c9:48:
5c:2c:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:02 2025 by rpki-client