Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa
File: 04944840-2d78-3778-aa55-a7340a83b5f1.roa (raw, json)
Hash identifier: 5I4/U+EyPEjHDGtaL30vm4uKXxEjgKDIKEmxFczmuxk=
Subject key identifier: 0C:61:09:1A:42:B8:AF:B2:7B:9A:39:D0:13:6B:2D:23:53:E9:A3:55
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A342AC445F63429821080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 50.96.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:34:2a:c4:45:f6:34:29:82:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=9d6bb3a1-7d04-481a-9373-fa97ba9e3969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:bb:17:9c:f1:0c:f7:b7:e9:51:d1:5f:f8:
89:e7:9b:5f:ee:9e:0c:5d:6c:60:96:0f:b1:de:a9:
46:17:bf:84:90:9b:dc:ad:c4:a9:06:6a:38:27:31:
1d:ae:0d:3c:23:b4:fd:f3:92:eb:e3:65:e4:0d:91:
48:bc:bc:3a:7d:c6:88:c7:b3:11:8f:99:c5:59:fe:
a8:27:25:f5:95:02:fb:ab:4c:c7:37:83:f0:26:41:
3c:84:bb:22:72:38:2d:bc:1b:e4:74:ca:06:1a:fd:
ae:74:0e:81:a2:a9:56:20:96:0f:59:96:a0:cd:c7:
a4:46:77:0b:4a:f9:16:f0:8f:a7:5d:c9:d6:97:bf:
5f:c8:89:f6:84:19:b6:ed:ef:76:ef:da:1e:ab:3e:
e5:7b:80:14:e6:f2:45:d8:22:65:81:fd:04:1a:c3:
af:a6:f2:88:31:56:76:ef:d3:e8:e3:e1:96:9d:40:
aa:14:8a:2d:28:18:7a:a7:bc:66:7c:b5:1f:32:15:
63:a6:0c:81:a8:0b:4b:d8:ec:95:7b:07:ea:80:eb:
6b:af:13:b2:bd:40:ae:ba:c6:cf:d6:be:a5:73:a9:
15:b8:e0:78:12:70:a2:0f:76:15:8b:91:ca:b0:4f:
32:eb:d4:1d:61:c2:01:19:7c:7b:2b:ee:5f:02:b7:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:09:1A:42:B8:AF:B2:7B:9A:39:D0:13:6B:2D:23:53:E9:A3:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:74:62:4a:f1:ce:b3:4c:8b:34:6f:03:0f:d3:60:9e:e8:ad:
32:6a:a2:d3:fd:c1:5f:c8:cd:a7:77:23:a1:7c:c6:8d:e9:60:
9b:4f:6a:cf:1c:01:28:f3:e9:b7:0d:50:e1:b6:f7:09:13:5b:
c6:f3:d6:d6:c7:b9:65:9d:72:c5:5d:d0:2c:c3:b4:34:c9:49:
94:76:aa:db:6b:a0:7e:8d:16:56:85:c4:33:46:df:9d:3f:ef:
21:99:2f:4e:2c:45:94:06:73:6a:db:54:d0:83:89:98:fa:c1:
31:91:ce:78:2a:2d:00:be:97:c6:aa:72:51:ce:9c:18:9a:ca:
22:8c:5a:4b:da:5d:d9:52:fd:5a:c5:7c:14:67:bc:af:49:5e:
7a:84:b8:03:23:ab:bc:b7:94:cd:dc:33:73:c0:6e:93:cb:27:
36:2f:d4:f4:3f:59:f5:88:f0:99:71:e4:4a:af:8f:59:a2:c2:
d3:4e:10:bb:e0:83:a5:7a:8e:56:40:29:ce:90:61:cf:24:5f:
6b:61:48:63:73:98:bb:bc:30:56:1c:a3:8a:13:56:90:bb:2f:
99:f3:39:b0:a8:39:c2:e6:a6:8f:17:1f:d4:c0:17:78:ae:d5:
21:b9:8c:bc:2e:3c:2f:b7:a3:b0:ef:ec:1a:bb:e0:f6:a0:a7:
5e:6d:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:17 2025 by rpki-client