Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa
File: f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa (raw, json)
Hash identifier: 0bOxSJeVz/E2mmsFs7FwDOd06VoPX7sWmcIvC9QLxic=
Subject key identifier: 6F:24:6B:81:14:29:E2:C5:A0:A2:F6:BA:9B:A1:28:71:40:27:FF:44
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB93ADD3F4CDF060339CD200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa
Signing time: Thu 06 Feb 2025 18:13:32 +0000
ROA not before: Thu 06 Feb 2025 18:13:32 +0000
ROA not after: Wed 07 May 2025 17:13:32 +0000
asID: 7029
IP address blocks: 98.23.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:93:ad:d3:f4:cd:f0:60:33:9c:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:13:32 2025 GMT
Not After : May 7 17:13:32 2025 GMT
Subject: CN=cb5066b8-5b0f-4ca1-abf9-3cf99d450e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:48:70:79:2b:90:c4:b1:9d:2a:9b:c4:fb:
44:d9:2b:66:78:a2:3f:96:b7:ad:31:b2:0e:5a:0c:
ac:1d:ed:8b:f5:bc:e6:a5:ce:6f:93:21:9d:68:e1:
4a:26:ef:22:42:2d:dc:82:de:e8:7f:49:97:b1:22:
37:c9:42:db:87:78:7f:0c:90:f7:06:b0:f5:e7:b8:
47:af:9e:08:8f:2c:8b:35:3d:80:1c:9f:28:54:fc:
fe:51:6d:ed:ed:9d:0d:d6:16:66:f1:2c:84:69:5c:
dd:94:19:78:18:45:04:31:85:b0:7a:7e:c7:34:99:
8b:93:eb:9a:be:d7:1f:75:7d:4c:3b:d2:60:32:3a:
7f:a7:a6:3a:11:54:4b:ff:1b:f3:44:9c:53:1b:82:
f8:23:11:ef:11:c9:08:c8:ad:67:52:50:b9:f7:45:
49:0a:f8:a2:fb:93:64:19:31:25:c5:4e:60:61:e6:
61:57:f3:4f:c1:40:37:b2:3e:b0:83:5c:ec:01:9f:
d1:5e:92:00:74:68:c7:a8:3a:58:1d:ae:b8:52:aa:
2f:d6:78:b1:d2:90:55:fc:ff:3b:1c:72:9b:21:c1:
6c:cf:35:5e:9d:ec:bd:16:88:25:d8:3f:53:4f:5d:
f5:f0:8e:08:f0:aa:3c:17:e4:b8:87:3c:b3:30:e1:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:6B:81:14:29:E2:C5:A0:A2:F6:BA:9B:A1:28:71:40:27:FF:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:32:78:05:01:20:b1:58:4c:5d:c5:5f:d5:b0:92:f2:2f:ec:
fb:54:48:91:ab:d6:c1:f3:0c:46:c4:dd:06:e4:96:8c:47:bb:
15:65:7d:b4:bc:b0:7a:6b:72:57:5d:fb:50:e3:6f:ba:c9:8a:
2c:55:6a:0d:c9:a1:64:f2:ad:ab:21:51:fc:61:7a:73:34:59:
27:18:f3:ea:4e:b9:12:a5:9e:f9:41:b4:9b:73:08:ec:aa:8a:
eb:56:f9:e7:a6:5d:9c:7c:62:ef:08:57:de:f8:4e:23:68:e3:
b5:b2:4d:f9:ff:35:76:f8:ec:05:b1:fb:5c:2e:95:8b:73:3d:
c8:42:f0:d0:6d:40:58:d6:36:55:88:77:c3:bd:ef:9f:88:58:
35:c7:a6:25:f8:82:25:f7:6f:4d:cc:f4:2c:20:a0:fb:fb:1d:
5a:93:c7:c1:4a:af:e1:3c:1b:a7:93:dc:90:8f:0d:11:f4:20:
7a:1d:27:2f:e2:35:6f:2f:51:52:b8:48:1e:bc:52:bc:20:35:
ed:c0:b3:3c:ad:de:97:e9:13:3a:14:61:09:c8:c4:e9:f5:0c:
bd:a0:61:2a:01:0b:63:0b:56:c4:d0:a2:31:5c:8c:af:75:fb:
45:a9:67:5d:d0:df:c0:16:cd:ca:ac:65:e8:dc:90:97:b3:51:
dd:f8:54:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk63T9M3wYDOc0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjE4MTMzMloXDTI1MDUwNzE3MTMzMlowLzEtMCsGA1UEAxMk
Y2I1MDY2YjgtNWIwZi00Y2ExLWFiZjktM2NmOTlkNDUwZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY9IcHkrkMSxnSqbxPtE2StmeKI/lretMbIO
WgysHe2L9bzmpc5vkyGdaOFKJu8iQi3cgt7of0mXsSI3yULbh3h/DJD3BrD157hH
r54IjyyLNT2AHJ8oVPz+UW3t7Z0N1hZm8SyEaVzdlBl4GEUEMYWwen7HNJmLk+ua
vtcfdX1MO9JgMjp/p6Y6EVRL/xvzRJxTG4L4IxHvEckIyK1nUlC590VJCvii+5Nk
GTElxU5gYeZhV/NPwUA3sj6wg1zsAZ/RXpIAdGjHqDpYHa64Uqov1nix0pBV/P87
HHKbIcFszzVeney9Fogl2D9TT1318I4I8Ko8F+S4hzyzMOETdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8ka4EUKeLFoKL2upuhKHFAJ/9EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjNiOGFhYmUtZTI3ZC0z
NDgwLThlNzItNWI5Zjk2OWJjOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYheAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEyeAUBILFYTF3FX9WwkvIv7PtUSJGr1sHzDEbE3QbkloxHuxVlfbS8
sHprcldd+1Djb7rJiixVag3JoWTyrashUfxhenM0WScY8+pOuRKlnvlBtJtzCOyq
iutW+eemXZx8Yu8IV974TiNo47WyTfn/NXb47AWx+1wulYtzPchC8NBtQFjWNlWI
d8O975+IWDXHpiX4giX3b03M9CwgoPv7HVqTx8FKr+E8G6eT3JCPDRH0IHodJy/i
NW8vUVK4SB68UrwgNe3Aszyt3pfpEzoUYQnIxOn1DL2gYSoBC2MLVsTQojFcjK91
+0WpZ13Q38AWzcqsZejckJezUd34VAg=
-----END CERTIFICATE-----
Generated at Thu Apr 10 03:14:27 2025 by rpki-client