Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa
File: 290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa (raw, json)
Hash identifier: LQ/zMWbVE2NNZkxiLiNQjzCYZVAQd7zIQcwhZzVRvgQ=
Subject key identifier: 24:C3:00:13:57:E7:CE:9A:F5:96:CC:1C:28:71:42:7B:B7:A9:92:47
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB56AC597DD13578DFD2C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 67.141.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:6a:c5:97:dd:13:57:8d:fd:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=c2d9e612-eb47-48a5-b368-15c26f7b55e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:17:8e:1a:53:b2:f1:a9:a7:b3:57:33:6d:78:
f1:c5:1b:45:cd:2a:1c:f2:c7:08:f7:32:d0:e8:90:
16:bf:f2:c4:b5:0c:15:13:ca:70:bb:20:f4:ba:d3:
f9:95:5c:37:4d:06:6c:50:16:dc:9c:b7:cf:94:cf:
ed:5d:10:1e:d4:b4:39:98:24:d9:f5:c8:b9:cc:b8:
5f:26:50:57:de:78:b6:c5:d2:3a:5c:53:98:84:16:
03:29:4c:ec:27:e1:3c:92:ad:e1:a0:a6:e5:a8:3f:
c7:17:b3:32:cb:50:b0:3e:57:b8:9c:fa:82:c5:07:
8a:bf:b7:2c:26:ae:2f:19:6f:b4:cf:fa:2a:1a:08:
4c:0c:cf:5f:df:93:93:d5:58:bf:23:4e:59:2a:f9:
61:76:91:d2:58:84:70:ed:2f:8b:b6:63:08:b3:e5:
ec:18:3a:dd:65:27:0d:75:90:ac:f0:49:29:b0:b1:
bc:28:05:79:3d:67:fa:c5:65:01:8f:70:20:ad:2e:
a6:e9:01:c7:37:4b:25:74:b2:5f:90:7f:1e:8a:79:
02:fb:92:f3:2f:52:2b:8a:73:34:52:f0:54:37:03:
01:c9:76:b8:68:c2:ac:12:ce:99:64:a7:17:bb:c5:
c1:dd:a5:ea:4c:4a:87:47:44:69:b3:b4:6d:0b:da:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:00:13:57:E7:CE:9A:F5:96:CC:1C:28:71:42:7B:B7:A9:92:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:2c:09:c5:4e:4b:ce:b6:bc:e5:31:1a:56:1d:43:83:f9:6d:
f3:dc:3d:99:ea:5b:5f:39:17:d6:6c:61:cd:32:82:ef:15:22:
72:ec:e1:c2:9d:bb:03:fc:a8:25:e8:b5:d5:83:93:44:80:31:
06:d7:6e:0c:83:eb:9c:dc:f6:ae:a3:5f:f2:e5:3f:e5:92:cb:
de:fd:f4:c2:08:4a:77:4a:98:26:97:5a:c0:23:f4:aa:d0:1b:
f1:b7:d3:15:90:38:a3:a8:a2:62:46:09:9a:76:c7:53:29:6a:
6a:ac:ec:3d:22:a9:95:e5:c6:05:f5:7d:a7:9c:19:0f:38:e1:
3b:05:b5:80:c8:1a:32:0e:68:cd:1c:4e:2b:36:4e:a4:0f:6b:
f1:7c:1a:cb:d1:c4:f1:7e:73:ef:cc:01:d2:fa:57:07:58:95:
41:72:64:be:c2:45:e2:f3:d9:f3:4c:36:2c:c7:7a:08:e5:da:
89:06:b2:b4:9b:79:04:10:af:53:04:3d:25:11:3b:af:b2:ab:
98:48:47:68:dd:91:03:88:32:7c:3b:2b:06:a2:dd:e8:01:da:
14:ee:a0:7c:b8:55:f0:34:44:d6:75:f0:86:b0:fb:a2:f0:4c:
2c:dd:fc:d6:99:42:57:fe:9e:fd:fb:56:20:5d:26:c8:be:66:
90:93:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:57:42 2025 by rpki-client