Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8d2cd00-870a-3a0a-ba19-0e306cdc92dd.roa
File: f8d2cd00-870a-3a0a-ba19-0e306cdc92dd.roa (raw, json)
Hash identifier: Qy2Z+j7bKT2Gzu9DQt2g9yltwM7xpQw0sMlTE7Hxuag=
Subject key identifier: 21:10:F7:F4:E7:33:28:74:F7:1C:9C:5C:70:64:B7:17:07:B6:57:DC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB4412DA4EC8C1C9FBA2911C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8d2cd00-870a-3a0a-ba19-0e306cdc92dd.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.20.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:41:2d:a4:ec:8c:1c:9f:ba:29:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=807b56b9-2577-42df-947c-1f4c5380811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:e1:c9:09:fa:3d:20:b8:d7:57:46:03:7b:
42:ac:c8:1e:4f:d6:c5:d5:45:c6:4c:05:c1:73:0b:
04:89:4c:cd:1c:16:03:55:bb:1d:fd:6b:d1:e2:fe:
66:4f:f3:b9:f5:88:45:83:af:26:b3:9a:07:20:6e:
a1:10:3f:21:0c:cf:f5:1f:d0:53:ca:c9:c7:63:20:
66:b2:96:4d:02:32:c1:d4:44:1d:1a:73:58:08:f9:
01:f4:69:46:b3:a0:77:6e:11:7b:02:55:d8:b3:04:
5a:ac:c2:d4:c5:97:e5:9a:cd:ea:a0:e3:34:66:45:
28:6c:31:c8:fb:2e:02:d6:2b:f9:66:d2:94:50:ce:
9e:e2:fa:98:8e:25:06:15:cc:8c:75:05:54:0a:87:
f6:80:ed:b9:24:6a:da:4f:de:65:2e:22:5d:5c:2c:
86:77:b5:15:b2:d2:ab:90:ec:8f:72:67:26:ee:43:
28:08:bb:5b:5d:e7:17:f6:0e:27:76:65:3c:e4:15:
4e:c5:38:9f:70:61:63:61:d5:da:4f:91:fc:bb:d4:
ba:70:5c:c3:b5:61:82:a0:13:ac:16:11:7e:10:f2:
f4:a9:b2:f3:ec:64:d4:35:93:bd:86:2f:fd:6f:c3:
09:ff:79:35:0f:fc:7a:8c:88:f6:6c:67:6a:85:46:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:F7:F4:E7:33:28:74:F7:1C:9C:5C:70:64:B7:17:07:B6:57:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8d2cd00-870a-3a0a-ba19-0e306cdc92dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:05:2f:a8:68:85:00:26:97:a9:cd:74:54:ea:b8:3a:a0:bd:
7b:6c:78:86:94:4b:7a:09:85:25:cd:6a:5f:b7:90:bc:77:88:
45:18:aa:67:6d:92:e9:0a:bc:37:cc:2d:e5:b0:59:0e:d1:63:
22:a1:62:9d:dc:5f:92:47:b7:1d:d4:f7:92:37:ae:b6:ed:af:
cd:d2:58:68:d5:9d:03:9e:da:a4:71:71:a3:85:14:0a:66:4a:
46:ee:bd:83:fa:e2:f1:d3:0f:16:35:65:31:60:fb:a0:26:c5:
9c:08:7a:06:b9:91:a6:63:29:4c:43:d1:7d:22:2e:41:ff:49:
62:dc:ad:bf:5e:2d:9b:46:65:f2:7c:86:ea:ae:7a:a7:35:a1:
5e:1a:62:b9:1d:d7:39:53:c2:69:7d:f6:42:e9:dd:4a:4f:43:
4b:a7:ce:4f:0d:b2:4c:0c:28:da:f7:67:68:f3:78:5b:2e:55:
e5:9b:c5:f8:97:56:23:ae:3a:cf:1d:55:cc:26:8c:96:93:83:
58:78:a6:24:db:12:dd:16:e4:a6:25:de:74:57:11:7c:d2:71:
ce:b1:a6:05:5c:fe:cf:fa:e6:f5:26:2d:70:af:ec:7d:34:b9:
2b:ac:57:50:6d:88:0b:e1:4e:4b:b3:cf:87:78:46:57:0a:9e:
09:b1:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:47 2025 by rpki-client