Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa
File: d4d720d3-846d-3239-b157-4b6a59742d0f.roa (raw, json)
Hash identifier: 0GD6+nr/Q6rCa/nn1KAonANZRe2FUzUJ/0w7SCxWwJ0=
Subject key identifier: 9F:3F:11:12:0A:51:07:6B:BD:9A:20:91:BB:E1:9A:88:C0:D5:F8:9D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848B78B8577A36D31EA9A7934C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa
Signing time: Thu 30 Jan 2025 14:00:51 +0000
ROA not before: Thu 30 Jan 2025 14:00:51 +0000
ROA not after: Wed 30 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 98.22.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:8b:85:77:a3:6d:31:ea:9a:79:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 30 14:00:51 2025 GMT
Not After : Apr 30 13:00:51 2025 GMT
Subject: CN=99285e27-a347-4e36-9b16-f801f986a1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:2c:44:d7:86:8f:de:92:5e:86:7f:25:0c:
2d:49:52:57:fa:d1:c3:c6:08:bd:39:cd:93:8b:07:
59:85:c7:27:28:6d:d8:27:87:ad:7e:5b:82:cc:c4:
6c:cf:df:1b:c6:c4:e7:b9:cf:26:cd:6c:73:25:1b:
d3:ab:23:c0:8b:04:d4:b2:8b:f5:a7:c8:43:06:c6:
a1:89:f9:09:51:b5:71:15:e4:9a:3a:34:a8:b1:f7:
12:91:62:56:8f:a2:84:0b:6e:e1:fc:44:c5:9c:07:
bc:82:23:51:88:3f:71:c4:7b:9c:12:ae:cb:6c:da:
f9:e9:73:11:3e:d8:b7:67:64:b3:6e:72:6e:14:f7:
a7:76:bc:29:e2:7e:67:69:0b:49:c9:85:3c:5d:10:
25:a9:0e:ea:05:31:aa:94:70:5b:11:f8:47:81:7d:
f5:12:44:46:dd:4f:53:2d:a4:95:28:60:8d:ff:01:
59:8c:67:57:32:8c:00:ab:8b:cd:d8:c7:56:99:0f:
cb:95:34:d4:4f:f3:c2:bd:c8:bc:00:20:0d:44:db:
e7:34:d0:4e:43:8a:6d:fb:5e:e3:78:29:45:74:83:
65:b7:a8:58:07:3c:46:11:3f:86:00:82:43:c6:35:
0e:2e:72:a5:44:56:d7:d1:85:7f:c4:01:b5:64:02:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:11:12:0A:51:07:6B:BD:9A:20:91:BB:E1:9A:88:C0:D5:F8:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:54:ca:df:c4:9a:28:76:7f:c3:c6:af:78:30:3a:3d:54:36:
3d:ba:d3:7a:e5:17:8b:da:4c:f3:df:8f:f6:5c:d2:a2:1c:2d:
c0:de:68:e7:4e:84:3c:d2:a5:d9:ce:65:c4:d6:b2:22:4b:d9:
c2:01:9f:bb:59:9f:18:d5:5a:4b:4e:6c:e5:ed:08:b7:a3:4f:
98:ee:1e:68:8e:27:b2:bd:77:24:53:3e:2f:22:c1:76:1a:48:
3b:12:8b:86:29:56:d0:a9:58:16:9b:3a:10:5e:b7:7e:3e:40:
dc:31:67:ea:ff:03:89:40:b8:34:1b:1f:f8:78:54:7c:cf:cb:
d0:8f:b7:ec:f6:ca:12:52:dd:73:80:bd:e7:69:10:d7:1a:8a:
ba:71:57:36:26:8f:48:76:b0:25:67:82:a0:ce:08:a1:a4:d0:
1a:e6:51:06:81:0f:41:bc:f1:e2:07:20:2b:a9:30:42:99:fb:
00:b2:78:26:c6:d3:f8:92:cb:b6:9b:53:1d:d3:df:b2:b0:79:
31:b0:18:ab:e1:77:c9:5b:93:fd:66:3b:d7:fd:b2:d4:ac:9d:
61:be:3b:38:17:f5:5b:bc:f6:b7:da:73:8e:cd:a0:a7:a4:b8:
3e:ee:61:6d:ed:9c:4b:80:3e:16:10:66:8b:77:6a:90:c8:e5:
9c:41:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:08 2025 by rpki-client