Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ab311abe-d532-3197-902f-376d0400d5b6.roa
File: ab311abe-d532-3197-902f-376d0400d5b6.roa (raw, json)
Hash identifier: dWIJS3SxuxsUWDsfcab8uzXX9fqFk7MwGFHS+WzQgyY=
Subject key identifier: 23:C1:BF:41:C3:98:48:3C:D0:AB:53:D9:F8:E3:21:75:15:8C:28:A5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155002FC2488F5A0EE0AA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ab311abe-d532-3197-902f-376d0400d5b6.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.19.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:00:2f:c2:48:8f:5a:0e:e0:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=fa12416b-2fbf-464d-b1b4-9cb6c9bd051f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:48:c1:71:78:8b:35:b7:d4:49:4e:26:39:
4e:14:52:00:17:05:d5:99:da:5e:4d:b8:8c:ee:4d:
f9:35:7a:5d:d2:bd:2e:9e:5c:ad:c3:a1:ab:12:ac:
2b:63:2c:5a:07:c5:7a:7e:d5:dd:70:5f:6f:1a:03:
81:39:10:2a:e9:93:6c:d7:64:ff:1d:72:df:08:36:
a1:55:d5:cb:ec:79:09:01:8f:be:e5:e9:f2:d9:de:
a3:a8:6b:5e:08:75:cf:10:6c:47:45:b1:29:db:d6:
00:9d:40:e7:4e:2f:38:6a:cc:09:e2:b2:c0:51:6a:
b4:97:02:e5:d9:e7:33:8c:2f:2f:94:0f:01:5a:d4:
d5:e0:4f:a5:cf:8d:12:61:b0:4b:ce:f3:13:d1:ed:
64:83:84:56:60:f4:dc:c6:2e:0b:8d:5c:76:e0:a5:
f0:af:04:9f:53:94:71:c7:b3:a2:8b:20:7b:14:b4:
14:ed:3d:eb:6d:b4:b2:02:06:92:23:e2:c4:d1:7f:
d2:d5:56:91:6b:12:14:64:29:fd:63:cf:68:b7:e9:
b8:44:a2:8f:cf:a9:08:3b:7f:07:08:2c:b9:b4:83:
63:7c:3f:17:e3:b4:1a:19:94:bd:cb:de:8d:d7:f9:
20:d9:14:dc:53:f7:28:31:19:3d:90:1a:72:7e:f5:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:BF:41:C3:98:48:3C:D0:AB:53:D9:F8:E3:21:75:15:8C:28:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ab311abe-d532-3197-902f-376d0400d5b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:b7:29:8d:76:b3:39:6e:13:d3:89:56:87:81:6b:51:51:67:
85:c5:38:ba:c4:65:b9:9e:fb:99:17:81:1b:b2:ec:be:c0:ab:
91:a6:0b:23:29:c3:52:51:82:fb:c1:fd:53:a4:12:8c:39:3d:
19:76:70:1d:8e:ca:21:d3:33:b1:cb:06:d4:76:39:7e:43:7f:
74:ca:b8:8d:34:cf:7e:c4:a4:7a:52:93:2f:4f:cf:68:23:ac:
50:21:d3:81:ec:ed:d6:ec:4d:c6:93:3e:33:ce:0a:a9:68:33:
ef:74:26:75:f5:24:db:bc:d2:8d:0f:c3:07:7c:7b:e9:88:ae:
d5:78:54:89:a3:02:98:5e:14:32:5f:37:9d:5b:d7:00:59:9f:
0a:a4:90:85:85:2b:4b:a4:3e:61:5f:7f:8e:6f:fe:73:5f:d3:
67:fa:91:84:7c:d1:78:eb:bd:5f:6c:fd:cd:0f:69:a4:6c:94:
e9:7a:1e:50:9d:7d:f5:0b:30:0a:df:c5:de:eb:9c:8d:a3:2a:
65:dd:85:d0:46:a7:76:48:55:43:50:2a:71:8e:be:2f:57:53:
a7:85:25:26:0b:89:f6:d0:bb:60:da:4c:f5:56:00:fb:18:44:
df:11:33:48:1a:d1:94:24:f0:e1:b2:2a:0a:99:b7:f0:f4:67:
3b:89:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:01 2025 by rpki-client