Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a07988d0-9c80-3321-ba5f-1e641945282f.roa
File: a07988d0-9c80-3321-ba5f-1e641945282f.roa (raw, json)
Hash identifier: RwpjmsoaVOjOaI99DcSycPsLZauhL17CWHxdFIQlkIk=
Subject key identifier: 87:B1:17:60:80:BD:7A:E2:48:D0:AA:51:19:F0:85:63:6B:20:93:90
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE11AF98C478C547C6D93D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a07988d0-9c80-3321-ba5f-1e641945282f.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 98.23.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1a:f9:8c:47:8c:54:7c:6d:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=29a3f3e1-5fee-472b-a0de-5c68d6499e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:75:c5:3e:4f:21:80:f0:b5:67:83:18:36:
a9:b4:5a:35:1e:15:4c:81:3b:4a:74:ea:32:56:1f:
27:4f:2d:df:99:35:da:17:79:a5:a5:64:83:e6:38:
30:fc:57:d7:a2:8b:0a:f2:47:33:6d:76:63:fc:43:
74:47:4f:4e:78:a4:12:e5:c7:a9:34:f8:cc:8f:c7:
de:f5:1e:90:bc:9c:a9:48:9a:39:2e:d9:be:ec:7d:
1b:56:53:ad:27:b9:cb:06:05:72:d8:d0:b2:24:e8:
e7:51:1e:ac:73:18:3b:75:89:41:13:a3:ac:d3:cf:
b7:7e:44:bf:22:77:21:cc:ce:1f:35:95:a7:15:73:
49:66:51:df:6b:6b:44:21:b2:2f:15:27:17:01:05:
b1:49:62:16:97:a0:17:59:a6:d4:8d:ef:71:89:ff:
91:3a:1d:70:37:7d:40:ac:c2:ab:e0:7b:b8:67:25:
35:86:03:ee:66:c4:34:8d:bc:fd:e7:89:9a:3f:9c:
03:5e:7b:dc:25:88:9b:5e:4b:2c:68:15:a5:f5:ac:
e8:f4:0d:5b:55:f4:ab:36:ea:af:e7:91:17:8d:bb:
da:e0:e0:7b:a5:23:13:e4:7d:c6:20:6a:3c:7b:b0:
f7:e6:28:c5:5d:43:2e:bc:25:52:45:30:f5:e7:89:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:17:60:80:BD:7A:E2:48:D0:AA:51:19:F0:85:63:6B:20:93:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a07988d0-9c80-3321-ba5f-1e641945282f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:6e:09:bc:8e:ed:bc:48:ef:66:bc:f9:1e:99:61:d1:9c:79:
76:a6:a7:dc:53:57:ba:e5:cf:66:d0:a6:c4:da:62:b9:fa:bc:
0a:e3:9e:92:04:99:f5:c4:b3:eb:f4:10:01:91:49:f7:eb:00:
e7:c0:3a:04:e0:39:09:bc:63:d0:c4:7b:d2:0f:46:4a:3a:a7:
fc:b4:be:e6:f2:0d:8f:e1:dd:a0:3a:26:ea:ba:f4:8c:dc:ec:
b8:18:c3:6f:c2:af:5f:27:5f:07:7c:92:85:ef:7e:64:ac:b5:
25:d9:b5:47:ac:a0:de:95:ce:44:26:49:33:c5:2e:32:e4:3a:
a6:5f:6a:f2:11:cb:fd:1d:29:16:4e:80:38:3a:8f:af:39:50:
51:1a:04:b3:41:ff:26:0b:33:cd:9f:12:81:74:8e:ba:e4:64:
30:36:43:40:aa:dc:4e:a6:84:62:a2:65:a5:01:06:55:24:7b:
c2:85:3c:54:c2:c1:23:1c:01:87:2a:97:bd:1f:20:74:3d:d6:
7a:98:7e:bc:65:cb:2a:09:93:82:22:2a:58:ef:76:7d:2f:e7:
c1:7d:fe:4d:58:9f:32:1f:53:f7:de:7b:73:36:c1:af:4b:28:
13:37:04:89:46:9a:87:62:4c:6a:34:d5:7e:f3:18:63:ce:26:
e6:54:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:22 2025 by rpki-client