Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa
File: 02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa (raw, json)
Hash identifier: z3p84COcyiNBQxewYR3SdbvFLh3EKpqIooB0kpDwGAE=
Subject key identifier: 97:B6:A1:1F:BF:38:C4:93:A4:A9:61:F3:69:6B:27:C3:E5:D0:AB:DC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584877508B67452930BF1942CE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa
Signing time: Tue 07 Jan 2025 13:50:22 +0000
ROA not before: Tue 07 Jan 2025 13:50:22 +0000
ROA not after: Mon 07 Apr 2025 12:50:22 +0000
asID: 7029
IP address blocks: 72.172.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:50:8b:67:45:29:30:bf:19:42:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 13:50:22 2025 GMT
Not After : Apr 7 12:50:22 2025 GMT
Subject: CN=3e24d094-6555-47c1-8f34-badcc51f7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:3e:e0:fc:7d:d8:2f:79:01:53:ed:9b:50:
e4:a2:01:c4:0e:3d:7d:08:1b:92:8d:88:12:ea:fb:
7e:3e:88:fc:8e:6a:87:da:44:f3:67:cc:44:66:e6:
14:93:d4:4d:b5:c9:ed:e7:c0:28:8d:cc:74:8b:80:
f0:71:1f:13:63:ac:05:3b:ee:c1:3f:ed:b1:54:29:
fb:31:d4:fb:1a:5c:50:74:84:13:24:a4:8b:32:b1:
0c:02:6d:20:b9:51:18:26:fb:18:62:30:ac:5c:7d:
c0:f0:03:6a:14:c9:b8:06:f7:e1:17:5c:6f:6c:65:
7f:39:99:7c:8a:d8:96:c5:50:6b:e8:7c:48:81:5b:
0d:1c:fa:fc:05:fc:27:6d:e8:41:87:3a:42:4e:00:
8e:e8:94:58:8f:19:32:d7:12:e0:be:a1:4b:8d:ea:
9b:07:66:ce:b3:e5:d6:78:7b:31:0f:00:85:d6:f4:
de:d4:4e:9e:c5:1b:65:a3:db:c5:00:23:2c:de:c4:
ff:a7:48:79:72:12:70:07:11:03:02:25:cc:92:1b:
46:a0:c2:3b:49:cf:7e:c3:64:fe:30:21:af:7d:8f:
39:88:c9:0c:6f:8a:17:1a:78:65:f0:06:32:21:5f:
e3:68:91:77:ce:8d:09:d8:e8:0d:88:0e:a0:cb:18:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:A1:1F:BF:38:C4:93:A4:A9:61:F3:69:6B:27:C3:E5:D0:AB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:08:12:0f:44:9a:6a:7f:9f:58:bc:64:e7:ed:70:d5:a3:54:
43:32:37:ea:26:d5:a7:9e:81:38:77:25:98:e3:88:a6:a1:13:
e2:7b:e1:b2:69:27:0d:33:03:94:7c:7d:6b:15:e9:78:9d:24:
f0:01:1b:17:8c:a9:70:6c:17:17:89:32:cc:50:2a:40:fd:67:
f4:9a:c0:b0:da:ea:2e:9a:d2:bf:81:d2:b9:6a:98:6f:f2:ff:
a6:10:e8:bc:00:5a:63:50:2e:c8:43:d4:ed:c4:f3:c7:51:b2:
19:5a:cb:a7:d8:a0:d4:a8:73:52:11:0e:48:ed:73:8e:e0:34:
d7:e5:22:f1:0b:e4:f1:3b:74:70:65:b7:73:2e:9e:00:80:41:
bc:60:09:a3:38:f1:4e:af:7a:6d:da:d1:3e:78:be:d6:e3:d0:
24:bd:71:8b:19:13:9d:6f:35:84:ea:e8:8e:53:28:fe:83:0e:
40:71:80:05:06:4c:ba:ff:7b:88:58:3d:c2:67:e6:93:16:a0:
d4:a8:3f:e8:af:46:9e:4d:d0:c1:ae:cd:49:5f:86:6f:31:67:
d2:26:e0:92:6f:85:91:82:3d:7e:5a:d1:f4:29:43:42:54:0d:
22:e4:4c:d3:04:5d:39:e0:e9:5c:2d:6c:1a:f9:c6:ee:f3:2e:
06:f0:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:45 2025 by rpki-client