Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa
File: 173f706b-4656-32a0-91a1-5138081207a9.roa (raw, json)
Hash identifier: F8/ps5rafrx/NWEXn2Y6AdgIs7nPbPFmHVNTxyisyQk=
Subject key identifier: F5:9F:9B:79:BD:E1:B4:87:C9:D6:15:B8:6B:18:97:9C:C3:9C:E2:C7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB571B12B4402CB92EB8380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.189.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:71:b1:2b:44:02:cb:92:eb:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=aa14a88a-3e19-47c5-9bde-581916dfd400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:71:06:4d:b4:cf:eb:17:f1:c2:4f:f6:6d:
d6:47:ea:41:c3:64:41:53:20:77:eb:e2:af:de:0a:
27:a4:58:0e:40:96:55:3f:16:4f:8f:75:41:56:3e:
e0:b3:3a:ce:9b:dc:7e:bd:e6:f3:e2:3a:39:dd:ff:
c6:66:eb:74:97:61:ac:d1:c1:96:76:d3:2a:6f:9e:
68:96:00:bc:a7:38:2f:b9:a2:30:df:8b:12:e0:7f:
9b:a1:35:92:4d:a6:bd:59:73:a8:47:65:1d:38:a3:
03:cd:4a:2a:c8:6e:cd:cd:fe:bf:c3:0c:37:16:5c:
cc:c1:ed:24:5b:75:4e:5f:f6:6b:8e:26:5a:26:0e:
00:80:c6:74:d1:d6:7b:be:69:61:da:7c:df:d7:92:
2f:22:02:30:ac:e7:6a:7c:4d:dd:9c:6e:ab:a8:6e:
0a:70:e4:11:e9:b8:63:23:26:3b:bd:a5:ae:42:ad:
03:11:d3:3d:88:de:10:48:0d:5d:0d:cb:47:cd:eb:
a5:c6:77:5c:2a:67:d7:24:1e:d3:d3:cf:e6:8a:b9:
ff:35:02:e5:c6:6e:46:4b:a5:36:ab:3a:92:f9:a9:
01:ab:9c:b3:6c:b0:66:b3:4c:eb:c3:de:83:2f:cc:
e6:a1:b4:46:f0:73:ce:64:85:86:25:1a:ee:a0:46:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9F:9B:79:BD:E1:B4:87:C9:D6:15:B8:6B:18:97:9C:C3:9C:E2:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:85:b0:10:16:8f:c7:90:56:6e:9b:57:52:2b:9d:2a:7b:54:
7f:f6:a3:8e:2c:51:6e:c9:11:d4:a7:8e:dc:5c:74:5f:f6:a8:
4a:8c:9f:1a:00:a3:19:a8:16:c4:f7:51:c6:3c:58:0c:8f:c9:
39:84:d2:1d:bd:38:d0:1f:b5:63:9a:cf:b4:99:73:ee:33:ed:
d5:fe:fe:b2:61:43:6a:ff:67:24:7b:d5:b5:cd:4a:dc:8e:b9:
e9:12:11:f0:3a:02:1a:ea:1c:48:49:ab:9a:7d:a6:6b:2f:56:
b8:04:d7:3e:9c:50:7f:71:a0:09:de:46:39:75:aa:75:8f:e5:
b6:c8:fc:0f:8b:41:3b:a4:59:1c:c3:38:18:d0:ea:d3:3d:a1:
aa:99:81:22:92:0d:df:e1:29:e2:5b:6d:ff:fa:94:5f:2a:f0:
64:68:40:b5:fb:c2:34:7b:a4:1c:98:ae:40:a8:cd:40:66:85:
1c:98:6c:e8:2e:d0:75:49:b8:a6:28:c5:cc:2a:a7:4b:2e:73:
9e:53:7e:78:d5:37:2b:3f:90:27:07:99:e1:4a:a7:7e:88:7b:
d9:e8:f0:93:b8:fc:49:f5:b2:c2:47:5f:e4:13:b0:00:28:d5:
cf:fb:8a:f7:f8:5a:69:21:fa:71:61:3b:7d:b0:84:0f:50:b1:
21:38:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:13 2025 by rpki-client