Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa
File: b20ae154-a53f-3420-abc1-04af85e66c56.roa (raw, json)
Hash identifier: TmN1P4GFmqfNeTjK/dbNg6nVPj8uObFH8ocMozvwnhg=
Subject key identifier: D0:17:0E:8D:F8:9E:01:95:4C:B6:9C:BD:9E:BC:FC:D4:45:84:30:17
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30F12C43BB9D06FA9D6180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa
Signing time: Tue 21 Jan 2025 20:39:02 +0000
ROA not before: Tue 21 Jan 2025 20:39:02 +0000
ROA not after: Mon 21 Apr 2025 19:39:02 +0000
asID: 7029
IP address blocks: 216.96.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:f1:2c:43:bb:9d:06:fa:9d:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:39:02 2025 GMT
Not After : Apr 21 19:39:02 2025 GMT
Subject: CN=cbac3fba-51e9-4f62-9a82-3c3d7cb67989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:b9:18:e8:ca:7e:5a:08:d4:50:ab:68:f0:
9d:2e:01:31:6a:42:bb:20:37:85:bc:5d:43:50:a5:
a8:a6:fe:68:da:1f:72:02:44:8d:d5:50:ec:cf:cd:
38:e9:09:ff:d4:79:d6:35:ed:62:de:8c:e5:ca:09:
2f:de:e0:97:5c:c7:d5:6a:cd:7b:5e:b8:df:e1:8e:
8a:c5:60:fa:d2:88:ba:51:3e:e4:e5:b6:4b:d0:77:
20:e2:43:84:6a:8e:78:41:fb:c6:92:ce:d1:76:22:
9c:77:24:71:c1:0f:1d:92:47:70:30:ae:17:fc:e2:
a2:1f:af:8d:23:6a:96:33:e3:74:3d:06:0e:8e:11:
d8:71:a8:d0:16:68:75:32:04:cc:9b:be:d6:ea:bc:
1d:b1:fa:34:8a:a1:69:6d:10:a9:12:3a:3a:98:5a:
62:dc:ad:2c:19:3d:bd:b1:20:2e:a1:78:92:b1:48:
12:c1:a0:a7:39:c7:75:c5:00:2e:ea:7a:1a:57:aa:
43:d7:07:d2:f5:60:57:2d:ce:78:1c:c0:65:1e:ad:
03:f2:49:e8:f8:16:79:a4:2d:99:ff:d3:94:ee:44:
67:2b:ea:fe:ba:08:70:20:6a:b0:a0:a9:a1:36:16:
86:b9:71:4e:7f:f2:ed:eb:7a:ec:c8:4b:c9:dc:f5:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:0E:8D:F8:9E:01:95:4C:B6:9C:BD:9E:BC:FC:D4:45:84:30:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.96.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f8:45:32:7c:ed:bc:a4:7c:6d:51:f1:9b:88:ec:91:16:71:
d7:17:6b:49:61:86:01:cf:70:8f:4d:0b:34:1c:3f:7c:43:a5:
2a:ee:c9:0e:b6:e3:0c:35:84:e0:0b:4f:89:f7:d9:e3:bc:67:
58:57:fd:3a:f7:44:4b:b1:62:d7:5c:49:36:3f:51:69:c8:54:
eb:c4:7e:ad:b1:ed:7a:4f:68:bc:a3:f3:55:5b:66:3a:8b:10:
c3:82:f6:eb:ab:29:23:d5:15:d3:cd:4c:35:f4:8e:30:4e:1c:
a7:49:1a:a5:e4:13:13:35:2d:31:1a:ac:ad:41:a5:85:f0:77:
77:8b:6e:d5:17:db:24:78:3a:4f:fc:09:11:72:4c:9a:46:16:
9a:be:2f:ff:ac:c2:8d:4f:fd:36:e5:c9:8d:d1:9f:09:37:4e:
ac:65:c0:63:25:48:19:8f:6f:b1:31:c0:66:f9:a4:64:6d:a8:
bd:75:bf:42:5a:49:ac:6c:b1:3c:5d:01:44:fa:d6:76:bb:e0:
70:64:76:6a:1d:98:c8:de:73:74:44:a5:59:24:ef:e3:a2:3c:
6f:cf:1a:ef:ce:ab:72:c9:b8:46:d1:64:03:92:89:e7:d5:1a:
fc:03:0d:46:b5:b0:95:24:44:b2:2b:54:d0:33:54:f4:44:56:
37:6c:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:04 2025 by rpki-client