Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1bc74a-fb9a-3c0d-aa0d-72d1de3e81d5.roa
File: dc1bc74a-fb9a-3c0d-aa0d-72d1de3e81d5.roa (raw, json)
Hash identifier: CNjz6Ty1LUVQsTiDmycagrKpuO+4acRvb1cNJLJlWAA=
Subject key identifier: AB:DC:37:45:4B:AB:50:0E:80:EA:BD:D9:D6:F9:88:2A:25:06:C4:19
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211206799C205C788349580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1bc74a-fb9a-3c0d-aa0d-72d1de3e81d5.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.16.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:20:67:99:c2:05:c7:88:34:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=6ab6b57e-7c81-4b49-a9d7-5bf7a6a301a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:63:1e:a8:47:0c:28:a4:dc:5e:8e:a3:38:
73:13:97:24:f5:52:d7:02:9f:3f:f8:7a:b6:e6:35:
f0:67:0f:34:4e:7a:48:7a:04:a4:64:ba:e4:ba:63:
b6:39:b3:af:51:a6:98:d3:39:aa:ea:bf:5c:40:93:
52:96:23:77:c7:3c:63:19:bd:60:27:c3:d2:9e:5f:
5f:6d:dc:e5:9f:48:8d:31:8d:c3:86:e1:b1:41:fe:
d4:fc:a2:48:4e:d0:d2:69:e0:25:c5:52:55:a4:a9:
72:a1:c7:62:ce:bb:bf:9b:ca:a4:9c:d6:2a:0c:d8:
da:60:07:2b:b4:a7:68:46:cc:80:87:0a:f0:cf:da:
98:1e:94:08:93:cb:82:1a:1e:93:ce:e2:2e:c7:20:
1d:c0:77:79:08:c7:00:43:00:1a:b9:fa:24:d7:d9:
d2:31:08:d5:7a:ad:2b:fc:4e:7e:cb:d8:ac:80:94:
9b:02:67:49:0d:03:5d:a2:f0:68:9a:f5:10:2b:af:
65:d9:e3:fe:21:9a:f0:0e:1a:0b:f3:b3:33:d9:d7:
e4:c4:44:2c:b4:84:de:7b:75:30:c3:2d:59:8a:6d:
14:2b:4f:ff:1a:36:77:3b:bf:4f:08:92:5a:61:d7:
f8:7b:37:0c:3d:ba:f1:eb:aa:83:a0:87:77:c5:d1:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DC:37:45:4B:AB:50:0E:80:EA:BD:D9:D6:F9:88:2A:25:06:C4:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1bc74a-fb9a-3c0d-aa0d-72d1de3e81d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c4:80:8c:65:4c:f0:95:9b:07:87:b7:dc:79:7d:23:b7:c5:
9d:45:1c:35:2a:11:23:80:27:14:66:1b:b0:3d:55:d2:ad:9e:
d3:88:5b:c9:39:1d:09:55:c1:fa:e0:3a:50:14:a7:83:62:b1:
10:7e:e0:76:60:21:e4:e7:fc:14:77:32:3d:3b:9f:02:b4:e3:
6b:75:bb:3d:38:e7:b1:f7:48:e5:73:8c:89:ca:4a:2a:4e:9a:
c1:bf:fb:69:06:62:67:c9:4b:c5:bf:dc:00:68:71:33:da:bd:
83:a9:51:93:c5:52:ab:90:fd:4f:e9:9c:10:d3:2b:12:ce:2b:
3e:2d:07:2c:6a:6e:5b:d4:98:5f:0c:a6:db:0e:d9:f7:59:14:
45:56:5c:0f:10:76:dd:6c:a9:a4:ce:4c:ff:db:f8:b0:cb:d2:
2b:cc:40:95:25:11:9e:87:e1:93:89:a7:1e:8d:d3:bf:68:08:
34:69:10:7c:89:3c:a7:2b:9e:9e:d8:e6:40:2f:de:4b:f3:41:
ff:9d:2e:87:9a:70:ff:81:e2:cb:75:4d:38:e2:f9:5f:4a:4e:
4b:30:a2:57:2e:0c:df:fd:f5:08:e2:f4:b6:3f:f1:fd:20:e7:
f4:08:f6:8a:bd:a6:da:d8:c8:13:72:c5:61:e5:dd:53:a0:47:
b8:38:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:28 2025 by rpki-client