Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa
File: e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa (raw, json)
Hash identifier: AY0M0X9SgdVIWxAGxJmILxOZroVh5kdX2OaYgp6b72U=
Subject key identifier: E2:51:F1:7E:B9:C7:64:67:4D:70:0C:FD:3D:2B:8B:C2:24:65:96:18
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB941034E2A92BCC2B5BD680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa
Signing time: Thu 06 Feb 2025 18:14:19 +0000
ROA not before: Thu 06 Feb 2025 18:14:19 +0000
ROA not after: Wed 07 May 2025 17:14:19 +0000
asID: 7029
IP address blocks: 98.21.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:94:10:34:e2:a9:2b:cc:2b:5b:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:14:19 2025 GMT
Not After : May 7 17:14:19 2025 GMT
Subject: CN=3cd89c8c-2814-4286-a814-90bd6fe8bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:45:f1:a0:ad:41:0e:ff:63:18:db:6d:1d:
87:b8:4b:22:73:75:1e:ad:f2:ef:0f:a4:ba:73:58:
c1:ee:43:c2:e4:e0:92:35:98:d4:be:92:f6:57:20:
0e:ad:67:f1:74:b7:a0:90:28:90:d7:55:12:50:e8:
9f:d0:ed:46:f8:e5:0a:58:8d:3e:fe:c9:3d:61:7e:
8c:56:8a:df:fc:4f:c5:ac:2b:11:bc:70:d4:9c:73:
38:a3:55:05:4c:35:5d:72:b1:c6:b6:81:1f:aa:7c:
f7:cb:e6:81:bc:80:d5:36:0f:56:44:da:26:ee:a4:
6f:78:c2:71:b5:9b:2e:ee:f0:12:05:2b:e4:ab:36:
46:f2:36:13:b7:76:93:64:cc:0c:b8:ce:a5:70:e5:
a6:81:6f:94:cf:c0:0b:42:94:76:6d:3a:bd:ed:3c:
53:9b:22:b5:76:15:8f:b5:be:ae:24:26:c4:a7:ed:
87:09:d6:ce:45:98:13:b3:e4:07:f7:0c:33:e8:12:
0d:0f:7c:b2:66:57:d1:94:ac:cd:5c:ad:6a:0b:8b:
0c:7c:8d:e8:77:6d:60:c0:40:c3:9a:0a:b7:30:d6:
df:ae:f2:d8:38:30:a2:7c:1f:69:51:78:7c:46:97:
db:95:ad:4f:1d:37:00:70:02:16:61:52:87:ae:46:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:F1:7E:B9:C7:64:67:4D:70:0C:FD:3D:2B:8B:C2:24:65:96:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:2e:40:de:9c:fb:c1:0d:74:20:2e:26:8d:ae:8f:63:e8:f4:
50:12:87:89:5c:ab:89:14:23:2e:cd:71:9a:dc:71:85:0a:a7:
d6:a3:2c:11:8f:c2:98:a8:77:f1:fe:c2:64:15:bc:11:b7:00:
dd:70:22:3d:e2:9b:5c:cd:3a:86:a2:e3:6c:ab:40:3d:da:54:
32:2f:ca:ba:62:f6:8e:4e:5e:32:6d:f4:5f:5a:fa:ea:86:43:
39:f7:bd:01:ec:28:f1:5e:30:7e:21:d2:5e:6a:95:35:85:68:
ff:a5:89:66:78:fd:35:86:04:a6:d1:e5:c3:32:02:0c:1a:93:
0b:e7:40:3c:5b:da:57:8b:ad:30:96:f3:43:84:63:8f:4d:82:
25:cd:16:cd:92:75:5e:25:dd:e6:69:cd:db:c1:c9:6f:6b:a3:
fc:7f:70:1a:3b:fa:12:8c:e8:f7:e8:93:7c:d2:96:c0:49:31:
c4:3f:a6:fe:e8:3f:49:af:c6:0e:af:c9:5c:4d:e8:9b:0f:18:
2a:84:af:52:c7:be:e1:cd:4a:41:0f:b4:73:29:5f:5a:4e:67:
07:c8:3a:7f:8d:38:68:0c:5e:16:7d:3e:9a:97:da:d7:14:e7:
bb:05:65:22:6a:7a:b9:12:ff:4b:b6:54:4f:2c:eb:09:3d:39:
2d:b5:36:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlBA04qkrzCtb1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjE4MTQxOVoXDTI1MDUwNzE3MTQxOVowLzEtMCsGA1UEAxMk
M2NkODljOGMtMjgxNC00Mjg2LWE4MTQtOTBiZDZmZThiYmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48VF8aCtQQ7/YxjbbR2HuEsic3UerfLvD6S6
c1jB7kPC5OCSNZjUvpL2VyAOrWfxdLegkCiQ11USUOif0O1G+OUKWI0+/sk9YX6M
Vorf/E/FrCsRvHDUnHM4o1UFTDVdcrHGtoEfqnz3y+aBvIDVNg9WRNom7qRveMJx
tZsu7vASBSvkqzZG8jYTt3aTZMwMuM6lcOWmgW+Uz8ALQpR2bTq97TxTmyK1dhWP
tb6uJCbEp+2HCdbORZgTs+QH9wwz6BIND3yyZlfRlKzNXK1qC4sMfI3od21gwEDD
mgq3MNbfrvLYODCifB9pUXh8Rpfbla1PHTcAcAIWYVKHrkaFgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJR8X65x2RnTXAM/T0ri8IkZZYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgwNDhjNTYtMWMyZi0z
YThlLWI0M2MtNTkxZTZhMWMyZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEuQN6c+8ENdCAuJo2uj2Po9FASh4lcq4kUIy7NcZrccYUKp9ajLBGP
wpiod/H+wmQVvBG3AN1wIj3im1zNOoai42yrQD3aVDIvyrpi9o5OXjJt9F9a+uqG
Qzn3vQHsKPFeMH4h0l5qlTWFaP+liWZ4/TWGBKbR5cMyAgwakwvnQDxb2leLrTCW
80OEY49NgiXNFs2SdV4l3eZpzdvByW9ro/x/cBo7+hKM6Pfok3zSlsBJMcQ/pv7o
P0mvxg6vyVxN6JsPGCqEr1LHvuHNSkEPtHMpX1pOZwfIOn+NOGgMXhZ9PpqX2tcU
57sFZSJqerkS/0u2VE8s6wk9OS21NvM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:31 2025 by rpki-client