Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd46934c-37f3-3103-889a-e5bc9213c314.roa
File: dd46934c-37f3-3103-889a-e5bc9213c314.roa (raw, json)
Hash identifier: Pyzuq39SOHwTe/y+CdSas5A2sotJgmiyRbY0mctl3k8=
Subject key identifier: F9:32:F6:11:B6:45:D9:25:99:40:79:B3:99:FB:08:85:07:E7:4E:93
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E07C1A7DAB1B5588105700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd46934c-37f3-3103-889a-e5bc9213c314.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.21.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:7c:1a:7d:ab:1b:55:88:10:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=0948322a-d498-4e23-8dd7-f15396df891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:13:b5:24:c5:94:27:43:d9:34:39:17:bf:
74:b8:e1:cc:48:c5:b7:20:15:f0:fd:da:63:77:80:
ed:10:af:d9:08:55:07:3f:c6:42:37:4a:6b:51:0c:
72:6a:09:76:a5:91:b1:a2:94:ca:1f:ad:bc:5d:ef:
39:7b:ce:c7:a9:a9:7e:de:ff:72:4a:43:55:85:9a:
a4:b7:cb:bd:ab:a7:55:27:24:23:19:ce:43:8e:93:
3b:c7:7c:bc:ea:a6:37:01:8d:df:0a:46:c9:23:b7:
fc:f7:c6:ac:57:e6:47:d6:2b:9c:d7:53:b9:ac:2f:
5d:54:31:59:26:86:76:34:6d:c7:9a:7b:60:9f:a4:
c0:cd:4a:04:cc:03:64:9c:f7:ba:d2:c8:c3:13:6a:
81:be:73:82:0a:e6:9c:4f:a7:54:75:39:ab:db:f8:
38:43:1f:0f:d8:2e:bf:0f:72:52:02:1f:78:cd:61:
c7:3c:4c:1b:d1:71:d5:40:e3:2a:8a:77:64:8a:68:
d5:ab:9c:94:c7:33:a1:4c:71:f0:eb:5e:85:a5:c1:
44:66:ed:67:79:5a:5d:3c:e9:d4:46:3d:0a:c1:30:
56:37:4c:79:48:4e:6e:93:97:68:d7:e8:be:7a:47:
d1:59:eb:a3:29:57:da:e4:c1:0b:0b:2f:49:d4:59:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:F6:11:B6:45:D9:25:99:40:79:B3:99:FB:08:85:07:E7:4E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd46934c-37f3-3103-889a-e5bc9213c314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:1f:72:3b:df:10:9b:ea:92:b4:9e:18:39:76:73:39:17:3e:
6b:05:a0:51:7e:58:08:a4:77:df:ec:aa:d6:65:4c:fd:b9:16:
17:ed:18:60:20:a4:6d:bc:b3:c5:d2:c7:cc:1c:3d:dc:21:1c:
aa:93:65:69:58:c6:e0:1f:78:d1:09:73:54:ef:07:43:67:c6:
a8:b7:7d:81:7e:d4:a2:02:85:fc:b8:41:38:a1:60:c8:ce:d3:
33:cc:03:00:e9:ae:8e:92:a2:0f:a1:32:40:c5:67:18:68:66:
8f:49:93:6e:e7:21:d4:f3:bf:15:22:cb:a1:3b:02:2b:fc:46:
29:bd:b6:f1:26:81:3f:03:0f:86:21:44:1c:bc:c5:8a:45:d2:
b6:df:83:fc:88:89:5f:b5:9e:8c:d6:a7:e9:f5:f2:4d:0e:d8:
c2:7b:d6:5e:e4:d0:a3:4b:28:ce:64:d7:71:5b:bf:86:8d:f0:
2a:0f:d4:11:62:f4:f6:ad:36:2a:78:c1:f7:8f:c0:95:ce:5a:
bd:3b:c6:ec:6a:32:36:5b:6e:d3:a8:58:e8:04:30:9c:a1:c8:
7c:3a:cd:53:29:a7:e4:0b:9f:04:d2:5a:ca:bc:68:6f:f9:20:
b9:cb:9f:2a:c9:bb:03:c0:39:eb:35:9d:74:3e:37:4d:8e:e8:
f0:1d:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:48 2025 by rpki-client