Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa
File: 1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa (raw, json)
Hash identifier: e3GI5MeFaT7JsWJrVHHabPq8348m+B/r9Z0u+dGKPJo=
Subject key identifier: 7B:7E:82:6A:A9:26:72:C4:DD:77:CB:3E:D0:D5:85:BD:08:21:35:F4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1552DA2DA4BCA49678B3C40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 67.217.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:2d:a2:da:4b:ca:49:67:8b:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=6deecd3f-3104-44bc-9301-57477691708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:cb:0d:9f:18:16:a7:60:55:35:dc:07:84:
6d:f7:45:83:5c:9a:b2:77:96:2f:d3:e4:c2:9c:20:
e8:f6:2c:d0:e0:0b:94:2f:23:e7:21:4d:41:8a:91:
2c:d8:f1:74:60:54:54:08:b2:bb:3d:78:7f:fc:f4:
39:98:e7:40:40:85:82:93:70:8e:e5:35:5b:ce:74:
f6:9f:65:3d:bb:0d:b7:14:62:db:a6:52:c4:41:c1:
ca:20:1d:98:57:eb:38:d6:21:8e:12:96:0f:dd:a7:
79:0f:77:c7:1e:1b:b7:63:ab:1e:dd:9b:a6:8f:99:
62:b3:36:11:dc:18:36:fb:77:af:64:a3:e1:7e:d8:
a0:c8:b2:a9:a8:1a:60:11:2d:c7:db:4b:ab:04:32:
9c:55:92:52:66:69:26:63:ba:f3:19:3e:5f:dc:78:
f0:d3:2e:4c:a0:23:38:41:dd:7b:3e:06:ea:2d:f8:
d7:8d:dd:96:b1:e7:13:2e:d0:92:5e:72:04:2a:4b:
f8:4b:2e:60:89:f8:7d:53:81:59:2a:42:73:02:78:
bc:4b:81:e2:47:8e:bf:09:6d:21:81:4f:d8:6a:8c:
45:15:78:ab:40:37:e0:00:de:fb:f6:56:4c:47:d2:
27:48:46:93:59:20:66:e7:a8:49:df:70:dd:01:4c:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7E:82:6A:A9:26:72:C4:DD:77:CB:3E:D0:D5:85:BD:08:21:35:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:f7:e7:53:44:59:c3:ab:6e:ca:92:ec:a3:c6:cf:22:ef:74:
c6:9d:55:05:16:63:6a:ee:69:89:3e:eb:a2:f6:30:ad:bf:68:
cb:35:19:99:09:5d:07:bb:39:72:51:6d:7f:cc:65:7a:13:1f:
76:24:04:74:21:26:af:59:98:b4:bd:d9:89:5b:de:b1:b3:53:
81:cf:1c:d0:0f:b4:6e:12:cf:88:a6:35:15:7d:fa:0d:9b:f5:
86:14:ea:28:12:0d:74:a4:2d:21:f5:99:3d:17:2e:61:4b:00:
21:f2:cc:ff:ce:e4:bf:a7:dd:8f:48:10:16:3f:5b:d6:ae:48:
85:f2:73:c9:e9:68:d2:1c:47:9a:a7:53:e0:24:19:0b:3f:ea:
65:be:6b:29:60:26:5b:37:ff:fe:2c:90:37:2f:76:cb:d5:c5:
73:80:8d:8e:53:79:c7:1a:b0:26:9e:7d:a7:72:93:ff:ec:2d:
9b:da:d6:73:16:17:7f:a2:5f:94:81:d0:d8:90:75:0b:6a:38:
7c:c0:0b:06:99:4d:9e:d5:87:b7:94:d5:65:db:be:16:0c:a7:
47:63:99:65:26:6e:d1:b6:de:fe:ec:06:8e:71:80:ff:30:5a:
36:f6:51:a1:dc:44:6d:24:8d:fb:94:3e:db:be:52:f5:ea:c1:
58:27:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:32:00 2025 by rpki-client