Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa
File: abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa (raw, json)
Hash identifier: yOreFTOl+8A05PvnUHzYnw7OyYT3U6eaiCQtY16TxhE=
Subject key identifier: 38:31:C6:D3:CA:82:59:A0:37:DE:E9:B4:F9:91:23:D8:73:D0:11:78
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21120A3C4436B648BD91580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.18.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:20:a3:c4:43:6b:64:8b:d9:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=cb7dffda-3c2a-42dc-b6a5-f9714636679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:f0:2f:82:9a:aa:ed:c2:53:56:56:00:e0:
f6:64:36:d3:e1:bc:c1:a0:2b:19:d6:53:e2:7a:d4:
42:a6:53:b7:5b:a6:65:d3:48:77:4b:88:e6:66:79:
12:e9:d2:d0:8e:11:07:49:a3:e6:43:15:42:10:8f:
39:7c:44:8e:2e:54:09:18:4d:9a:6f:63:df:7b:7b:
15:7d:a2:59:f9:0f:82:b7:62:0f:4e:56:98:23:c2:
0a:bb:b8:d6:b0:0e:7e:0b:76:ff:70:c2:d4:ee:76:
5e:6a:48:07:da:ee:44:05:2d:da:cd:f5:09:f0:40:
17:a1:a9:46:af:f7:ee:8d:7f:83:f1:81:a3:aa:1d:
96:5c:ee:ed:30:62:a3:7c:2c:2b:b1:ec:ef:b6:7b:
b0:c9:b2:85:fd:74:63:ce:83:7b:a4:17:97:8e:ec:
2d:c7:b3:8e:de:83:d4:40:37:e7:71:c3:67:68:2c:
df:48:f1:9f:62:a0:ca:70:1c:9d:55:92:e4:ac:cd:
5d:4b:f2:5d:b2:45:52:17:86:46:79:a1:79:c8:e1:
63:77:ab:e1:e3:cd:c4:31:91:b8:4f:dc:ed:23:72:
9b:3d:90:9f:53:98:bf:80:38:85:44:e2:09:bd:15:
b8:e9:86:ef:2f:10:7b:cb:d2:1c:2e:a2:8b:ec:bc:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:C6:D3:CA:82:59:A0:37:DE:E9:B4:F9:91:23:D8:73:D0:11:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:82:e4:8e:e4:81:26:a3:29:8e:f8:8f:40:e8:04:d1:81:87:
37:56:21:78:70:92:2e:84:fc:91:ef:e5:3a:d6:bb:61:2c:fd:
d8:55:69:13:03:2a:20:30:2b:87:6c:9e:70:76:1c:58:1a:dc:
87:05:03:75:0c:0c:44:03:93:27:cf:69:96:53:9f:e8:5d:72:
f3:d1:c6:f6:8b:22:fa:f8:d2:8e:f9:42:40:c1:c1:27:dd:a3:
5a:50:c8:8e:83:e4:01:d8:d1:48:03:a7:aa:7f:19:bb:4a:aa:
f0:89:ab:f0:13:be:70:07:7d:d1:11:2b:3d:99:15:a2:99:2b:
76:2f:b0:44:f0:8d:e7:da:38:33:c0:d8:7b:d2:22:c3:5d:c6:
5c:81:4b:5c:c3:73:e3:11:04:f1:e9:30:88:ac:9f:7a:36:d7:
89:ca:89:84:34:10:6e:65:11:a5:02:cf:64:85:a2:25:51:88:
b3:5b:75:73:57:e1:7d:3f:32:4d:aa:4d:15:2a:00:f6:cd:cd:
6c:7e:fa:6f:5d:b1:57:c1:e8:06:ef:26:87:e6:3a:81:68:8d:
20:7d:27:e5:03:d0:71:8d:3e:7f:14:fd:d9:d5:22:99:24:34:
91:00:f9:17:d7:61:7b:5e:1a:bc:92:ee:0b:51:2c:89:e3:22:
35:4c:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:37 2025 by rpki-client