Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa
File: d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa (raw, json)
Hash identifier: r9wACJ2fWFQkH+xHe65G6DWqudBEotxXyFUS5Wp1zKM=
Subject key identifier: FA:08:E1:9C:D1:4D:DE:ED:7C:B5:44:17:94:B8:7F:64:2F:7D:3A:7B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30617130E08F1742849700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa
Signing time: Tue 21 Jan 2025 20:37:54 +0000
ROA not before: Tue 21 Jan 2025 20:37:54 +0000
ROA not after: Mon 21 Apr 2025 19:37:54 +0000
asID: 7029
IP address blocks: 98.18.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:61:71:30:e0:8f:17:42:84:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:37:54 2025 GMT
Not After : Apr 21 19:37:54 2025 GMT
Subject: CN=ba7bc294-4b95-4652-8ac4-890c7b0ca766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:d0:87:79:e8:82:1f:33:05:b1:da:bd:c4:
c4:e4:37:0b:46:91:7a:17:02:5b:fe:05:41:0c:8b:
a9:bf:b4:bf:a7:e2:7c:3f:4b:0f:ec:2a:38:9f:45:
87:9e:1c:1f:5c:67:a7:3c:00:eb:2a:85:57:9c:56:
a6:f9:0a:ad:ac:b3:09:f2:ec:a0:93:61:a9:64:94:
3a:24:93:82:4f:3a:83:36:25:be:d5:6a:a3:0a:1c:
da:3f:19:6b:cc:60:08:96:2c:93:91:ef:cc:56:ef:
12:20:e8:f0:38:b9:70:19:97:cb:18:24:18:41:87:
64:47:c1:52:1a:dc:bc:69:15:41:35:13:43:e7:7a:
c1:5e:5e:4a:d1:2d:80:57:75:50:19:4a:1e:ac:a0:
66:42:4d:5c:90:b0:50:71:b1:d0:6b:9c:f7:a6:6a:
fe:cb:34:89:17:ad:d9:4e:4d:8e:46:c9:c5:17:de:
54:8b:ae:1a:0a:5d:33:04:03:8c:e3:52:cf:82:0a:
a2:8a:1c:17:98:94:c0:10:3e:8d:06:25:1c:23:7d:
de:39:4b:12:19:d1:4b:d2:40:ea:18:dc:c1:cc:9a:
c5:d7:c7:47:56:12:99:2f:05:94:17:31:f6:c1:f7:
2f:60:8b:6e:1f:07:a8:a4:09:c1:9b:45:c0:86:c9:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:E1:9C:D1:4D:DE:ED:7C:B5:44:17:94:B8:7F:64:2F:7D:3A:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:e9:f0:b2:7a:43:53:f8:21:52:70:ea:c0:1d:34:77:53:48:
f7:1a:f3:5d:06:d5:dd:ba:98:b2:d1:55:ca:ea:83:e4:68:6d:
68:5d:c6:b3:7f:e8:f6:39:89:c1:64:d1:0e:3a:27:e9:d7:38:
52:b2:6e:75:23:a4:fb:97:69:f3:59:9a:36:0f:c8:7e:3a:22:
2b:e9:f7:4d:67:bb:1d:bc:e5:6a:19:5a:ca:4a:71:13:d7:91:
56:fa:54:13:21:5c:84:4d:66:48:4a:3f:f7:8e:2f:70:34:a7:
0e:ca:be:41:a3:ff:f3:79:a6:83:63:75:ed:3f:45:70:54:d9:
5a:c6:7d:fe:e1:47:37:5b:48:0e:3f:2c:b6:ff:56:80:c3:5f:
54:70:fd:d3:63:7b:23:dd:55:1c:b6:4c:92:2e:11:bd:c3:a5:
7b:ae:06:dd:5e:97:2b:05:1b:e4:d7:25:b3:07:ae:0f:b2:62:
ef:c1:05:22:c9:3f:5e:6c:b7:f6:59:98:90:4e:ea:db:0d:ad:
f4:75:7e:0b:64:6f:6a:2b:77:69:8d:ce:ad:11:89:72:f0:01:
45:e3:be:69:56:79:48:23:6e:9c:44:6a:90:8e:36:d9:10:84:
76:06:6c:a7:13:71:1a:a6:1c:77:36:85:6b:89:92:7d:84:f2:
1f:fd:a6:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMGFxMOCPF0KElwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzc1NFoXDTI1MDQyMTE5Mzc1NFowLzEtMCsGA1UEAxMk
YmE3YmMyOTQtNGI5NS00NjUyLThhYzQtODkwYzdiMGNhNzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpbQh3nogh8zBbHavcTE5DcLRpF6FwJb/gVB
DIupv7S/p+J8P0sP7Co4n0WHnhwfXGenPADrKoVXnFam+QqtrLMJ8uygk2GpZJQ6
JJOCTzqDNiW+1WqjChzaPxlrzGAIliyTke/MVu8SIOjwOLlwGZfLGCQYQYdkR8FS
Gty8aRVBNRND53rBXl5K0S2AV3VQGUoerKBmQk1ckLBQcbHQa5z3pmr+yzSJF63Z
Tk2ORsnFF95Ui64aCl0zBAOM41LPggqiihwXmJTAED6NBiUcI33eOUsSGdFL0kDq
GNzBzJrF18dHVhKZLwWUFzH2wfcvYItuHweopAnBm0XAhslc0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPoI4ZzRTd7tfLVEF5S4f2QvfTp7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRhMjBmMWEtZDVlZS0z
ZjBhLTk0NDItNjM5ODA0ZTAzZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErp8LJ6Q1P4IVJw6sAdNHdTSPca810G1d26mLLRVcrqg+RobWhdxrN/
6PY5icFk0Q46J+nXOFKybnUjpPuXafNZmjYPyH46Iivp901nux285WoZWspKcRPX
kVb6VBMhXIRNZkhKP/eOL3A0pw7KvkGj//N5poNjde0/RXBU2VrGff7hRzdbSA4/
LLb/VoDDX1Rw/dNjeyPdVRy2TJIuEb3DpXuuBt1elysFG+TXJbMHrg+yYu/BBSLJ
P15st/ZZmJBO6tsNrfR1fgtkb2ord2mNzq0RiXLwAUXjvmlWeUgjbpxEapCONtkQ
hHYGbKcTcRqmHHc2hWuJkn2E8h/9pk0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:46 2025 by rpki-client