Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa
File: a65c051a-9022-3436-b16e-e62d98c54372.roa (raw, json)
Hash identifier: uK0FeHXUw0c7ii3LKMlI4h8uq/as8qsB0YNyYkX2KNU=
Subject key identifier: 2E:AF:F9:0F:4B:7A:49:C7:14:57:FD:07:DE:B7:2A:A6:C9:86:F5:34
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848BFEBC348462521FB132E2F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 98.19.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c3:48:46:25:21:fb:13:2e:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=bb2ec5d7-ee27-4a75-b7f0-70f3b4998a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:bd:46:33:dd:a3:b6:66:af:49:4b:93:68:
d5:28:4b:15:43:2d:a9:78:c4:5f:52:3b:d2:d4:e8:
35:4c:d4:59:2b:fa:de:be:9d:01:ef:6b:8f:97:9d:
d4:f4:61:7b:3c:60:11:8a:ec:e3:eb:a9:57:32:2f:
b9:d4:a5:2d:60:17:78:67:76:c1:14:65:9c:8b:2f:
26:d5:85:9b:4d:0c:1e:93:59:ad:61:fa:cd:63:d9:
45:47:11:a7:10:0a:01:75:1c:91:5b:d1:1f:cc:ee:
75:b1:9c:8a:21:39:b6:62:9d:86:b7:37:d5:dd:5b:
3e:34:31:27:ad:38:b7:b5:63:17:c1:dd:32:6f:73:
55:18:f1:92:21:28:6e:46:0b:1b:17:ed:96:55:e0:
12:0e:53:c9:e1:07:d2:12:31:77:3c:0c:aa:fb:ce:
8a:c3:ba:70:00:06:a0:38:49:84:7e:43:97:dc:cb:
10:3b:3d:e5:52:9f:8b:4d:78:9b:8b:49:79:50:2b:
3d:e4:f3:47:74:7f:29:12:e5:2c:19:7e:c5:f6:ba:
08:a4:78:60:ab:8b:d3:a0:a5:5a:7e:48:02:23:93:
9e:cd:62:c1:ce:a9:fc:5d:cc:07:eb:7e:da:fb:d0:
aa:50:bb:92:ba:e0:6f:e6:2d:ab:79:eb:1d:ac:53:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:F9:0F:4B:7A:49:C7:14:57:FD:07:DE:B7:2A:A6:C9:86:F5:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9b:55:0d:91:1f:07:fb:02:5d:61:4c:a0:39:34:ec:ce:ac:
eb:3e:48:d5:5b:a0:aa:8e:e2:1a:e6:78:42:5c:51:cc:a7:78:
48:44:16:d1:0d:2f:2e:ab:70:06:de:c9:15:ef:04:75:6a:03:
a3:4a:8a:fa:30:50:5a:4f:12:1c:fe:1e:08:fc:73:32:84:c3:
37:a0:f8:5a:95:a6:f0:8b:fc:29:21:65:a3:e6:0c:36:c5:99:
e7:e6:c7:9d:09:e3:b4:3f:44:31:c8:b2:8e:22:1d:31:0b:96:
0f:56:d5:37:6c:2a:f7:08:ca:51:f6:b6:67:b2:d7:c1:dc:d9:
a8:42:52:e0:83:0b:c7:92:31:26:73:a4:cd:36:69:f1:74:74:
61:9b:7d:55:97:ec:d6:07:d3:68:75:6b:f3:17:2d:66:f3:40:
10:7d:a5:19:7b:9b:1a:5b:76:63:0a:03:d2:e2:99:b9:df:08:
d3:b7:25:4b:50:31:2f:fe:7e:d0:1b:46:fc:3a:ca:1f:86:49:
8f:76:25:ab:4d:27:75:11:3b:a7:17:86:77:0c:19:aa:2d:e4:
9f:04:86:0b:7b:d4:73:77:ac:c9:30:49:21:99:72:e7:72:e6:
bd:1e:a6:7b:4b:02:0e:b3:3a:9d:3f:8d:55:5d:72:d0:ca:dc:
b2:95:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:28:09 2025 by rpki-client