Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6c57e2a-5867-3e1d-99e0-a128df41b1cf.roa
File: f6c57e2a-5867-3e1d-99e0-a128df41b1cf.roa (raw, json)
Hash identifier: Nkzc60uQuph7wpFN7q3qr0T+X8XMfRl9TyuTjZWYxqE=
Subject key identifier: C0:53:76:AE:25:D4:67:13:61:C0:AF:65:A2:7F:C8:0F:89:4C:B6:0B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584472E2A1FFD001275F397CD760
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6c57e2a-5867-3e1d-99e0-a128df41b1cf.roa
Signing time: Fri 05 Jan 2024 04:37:56 +0000
ROA not before: Fri 05 Jan 2024 04:37:56 +0000
ROA not after: Thu 04 Apr 2024 03:37:56 +0000
asID: 7029
IP address blocks: 98.23.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:e2:a1:ff:d0:01:27:5f:39:7c:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 5 04:37:56 2024 GMT
Not After : Apr 4 03:37:56 2024 GMT
Subject: CN=bf7638c1-4fed-4d6c-ad47-177a9fb8613c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:af:e9:17:3e:11:03:82:62:77:3d:69:7d:
ee:e3:ca:3b:4d:c5:4d:e6:1f:55:fd:e7:b2:c5:b2:
9c:26:23:fd:de:5c:a1:93:48:e5:36:af:15:74:ff:
70:7c:f0:1b:c5:8b:ab:65:4c:7f:df:14:20:d1:0f:
7b:48:05:25:41:0e:3e:f9:61:5f:fb:a4:11:9d:35:
b9:ae:01:94:f2:5a:b0:33:2d:bf:8c:d8:af:b4:bf:
7a:17:c6:d0:39:4b:5f:d0:ba:36:c0:f0:d6:2c:20:
aa:61:c7:1f:ea:17:44:41:48:04:50:22:e3:6f:68:
39:07:9b:1d:62:8c:a2:5d:44:06:6e:83:95:4b:ee:
22:a7:cd:3d:c8:da:21:03:cc:6b:1b:06:eb:2c:08:
64:0f:e8:30:ea:62:08:8a:54:c5:e9:a6:aa:3d:ab:
fb:06:94:44:06:8e:dc:8a:ca:64:98:e5:20:cc:f0:
2f:68:50:c2:79:95:a2:71:1b:c6:8f:b8:3c:8c:9d:
5c:5d:3b:2c:97:79:52:dc:7c:c6:ea:2a:e2:fb:75:
80:bd:61:2b:46:3d:3a:7e:d4:51:eb:3a:4c:a8:b1:
6b:c4:f5:65:76:bd:65:2f:7c:54:dd:1c:0b:bf:dd:
2b:1d:91:4f:b8:f1:b8:db:c4:1c:86:89:76:17:55:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:76:AE:25:D4:67:13:61:C0:AF:65:A2:7F:C8:0F:89:4C:B6:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6c57e2a-5867-3e1d-99e0-a128df41b1cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:77:df:8a:8b:d3:92:bc:c0:9a:93:05:5a:a3:4d:25:06:f9:
19:38:48:2f:7e:8f:65:f9:72:bb:ca:cb:ff:fa:a1:ad:4f:4b:
69:66:77:79:3d:9f:de:46:fa:c7:dd:23:49:2b:3e:f6:4a:20:
55:71:12:5c:11:f1:ed:de:77:e8:64:5d:a0:cf:db:6b:40:ba:
7f:30:24:28:a8:79:a8:f6:09:ef:9d:01:29:e0:14:a8:12:16:
df:dd:1d:fc:ce:11:3a:53:16:17:12:d6:4b:dd:a8:fd:58:92:
d8:b6:05:3d:73:bb:5f:96:95:fe:a2:66:d6:83:c5:0c:c5:e6:
20:93:f0:99:84:02:7f:59:47:bb:2e:03:ec:2f:ee:9b:64:23:
b1:36:11:be:b6:3f:e4:0a:a5:b0:6a:74:f0:5e:23:9b:91:1b:
8b:ad:4a:dd:a0:65:1a:cf:87:bd:ed:7f:3e:4e:cb:d3:87:f1:
ad:f2:6d:8b:6e:cb:b0:fa:9c:30:2d:22:9e:f1:ff:e1:62:78:
ba:17:4f:70:2a:51:08:15:18:1e:4b:11:0d:8c:eb:39:9f:5a:
90:42:dc:09:88:f5:25:f4:c5:0f:b5:be:11:1a:8f:40:bf:bf:
24:e0:a8:c7:ff:de:7f:e0:f6:7a:38:e1:52:7a:e0:16:48:f9:
c5:4d:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:28 2025 by rpki-client