Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4928e62-f09d-3221-a09b-81f7aa8c65d5.roa
File: c4928e62-f09d-3221-a09b-81f7aa8c65d5.roa (raw, json)
Hash identifier: 5xWqUEKNuCyHS5wYqroxHoq0Ej1IFX/oM6krR8DJ+co=
Subject key identifier: 57:F0:B6:DC:45:0C:18:6B:B1:1B:57:EE:28:74:70:45:64:1B:F3:DD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0A196C15D4864E306F300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4928e62-f09d-3221-a09b-81f7aa8c65d5.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.20.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:a1:96:c1:5d:48:64:e3:06:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=fad37961-385d-49c3-9b96-adfc74af46e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:73:f4:7e:8e:ff:c5:f9:6d:3d:66:6a:a1:
19:7d:f8:11:15:75:73:1f:91:c6:26:5f:88:b0:3d:
f3:a2:95:9c:00:71:f0:c7:81:85:b5:15:60:0d:98:
3c:cc:8a:5b:cf:7b:5d:66:74:c2:e1:de:d9:c4:25:
ff:b4:d7:5a:90:30:33:eb:ca:98:3b:3b:37:16:6e:
71:b5:8c:9e:0f:da:0d:40:f1:fb:91:33:35:2f:a2:
da:03:20:72:38:d6:4b:cd:b9:c9:9d:59:26:21:c1:
c9:24:cb:f9:cd:95:35:47:e0:4d:00:e2:9b:48:c6:
9f:07:4a:ba:6d:1b:0a:39:dd:7b:23:eb:0c:71:5c:
53:8b:e7:6e:1c:7b:78:d9:23:a4:6a:40:93:73:b5:
d0:bb:c0:04:1c:51:9a:53:3d:0c:53:ff:dc:58:96:
8a:dd:28:3d:4d:40:e6:5b:41:4c:27:0b:f8:6a:a1:
a6:53:7c:52:d0:8f:5f:f7:85:f2:dd:4b:e0:9f:e1:
da:7d:80:08:c6:29:bb:93:a6:8c:3e:ee:c7:a3:2d:
bc:95:86:6d:fb:d5:ef:82:91:01:78:3c:75:af:9e:
73:9a:ee:e8:1c:8e:5a:89:1e:69:40:d6:62:d0:fc:
b0:85:59:80:5d:38:94:07:4a:df:6e:8f:0d:21:5d:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:B6:DC:45:0C:18:6B:B1:1B:57:EE:28:74:70:45:64:1B:F3:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4928e62-f09d-3221-a09b-81f7aa8c65d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:57:e9:34:7e:51:38:f4:1d:9a:cb:54:29:ca:a6:30:97:25:
98:8b:a6:32:1f:45:f2:02:92:75:f8:e8:b0:3b:dc:ec:f3:96:
d3:55:27:c4:07:bd:49:08:b9:30:5a:c0:6c:c6:ea:53:41:0d:
6e:76:d6:bd:79:22:5d:d4:06:65:36:1e:43:9a:c7:9a:a8:79:
64:c7:e1:84:4e:21:37:d3:b6:f1:f3:f2:3e:32:dc:52:c2:04:
86:3c:cc:55:7e:b1:80:bf:81:13:be:e3:44:c6:98:94:8c:48:
f6:b9:6b:9c:fd:85:b0:09:29:53:8d:2d:12:cc:4b:db:ef:f7:
e7:d5:23:35:10:db:8e:3b:17:59:b6:0a:d2:b2:38:62:57:20:
23:5d:7c:e7:a5:3d:11:ea:ff:83:63:de:3c:f5:63:b4:6d:dc:
b3:0d:3d:92:fd:d1:e8:5a:2c:3f:b9:d9:c6:a8:44:ce:3c:f5:
3c:57:22:8b:71:2a:30:5f:31:ed:e7:8b:db:12:d4:83:f0:c4:
58:8f:12:95:c4:e9:5f:27:30:f6:40:d6:24:1a:fb:34:d9:42:
8d:3d:fa:df:ac:c8:69:7f:8e:9b:bb:86:3d:bd:da:11:78:53:
4c:a1:eb:c6:70:7d:e7:d6:24:8e:c7:df:a1:11:98:38:37:5a:
0a:09:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:29 2025 by rpki-client