Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa
File: 2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa (raw, json)
Hash identifier: TWeQUQx8ebIhQYSM8WOaeTwYGulvj+7KTSrUg5m1UME=
Subject key identifier: 3F:24:6D:88:A6:A6:8E:F1:CB:21:D3:C4:9C:81:BE:89:AF:1B:11:E9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553707145042714D214980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 173.221.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:37:07:14:50:42:71:4d:21:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=eaf4d019-40b5-40c4-a83b-f861de1571d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:e0:e9:5f:4f:37:7d:4d:48:aa:c1:f0:5f:
67:15:df:22:6c:a0:7e:d0:2d:e8:ab:45:23:45:06:
e1:ee:38:77:9f:36:0e:c4:d5:b9:d7:2c:58:a3:e8:
f2:38:c1:81:d0:fe:e7:07:de:59:26:d9:27:26:3a:
58:c0:b4:9f:93:8b:ca:09:50:3c:0d:e4:88:f0:4b:
75:54:41:ec:62:c6:6c:b5:8e:fa:7a:0a:1d:6c:af:
c8:5a:7c:51:c6:8c:81:d9:1f:2b:19:77:e3:5b:5a:
af:6c:72:b9:65:71:af:5c:cd:bb:0a:b3:45:1a:81:
b8:99:3d:49:bc:ec:06:cf:04:a4:d5:df:9d:33:28:
24:2a:a4:83:f9:63:47:03:52:f0:ae:3f:3a:4a:cd:
67:3d:30:50:b6:6f:d8:51:2b:46:ef:69:b1:48:5f:
90:7a:61:fe:dc:44:a4:ca:d1:92:0d:35:df:66:06:
2c:54:40:56:39:2c:63:bb:54:a8:58:e2:23:98:62:
8c:07:dc:25:5a:a6:16:f1:9e:c4:95:0b:77:d7:0b:
da:69:9c:87:de:c2:77:2c:fe:83:2b:98:2e:0e:be:
38:f7:9c:42:d8:62:f7:45:85:fb:12:a3:11:42:b8:
7c:4d:d3:95:19:ce:b7:04:93:cc:26:ce:64:06:4c:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:6D:88:A6:A6:8E:F1:CB:21:D3:C4:9C:81:BE:89:AF:1B:11:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:87:ab:4f:4d:9d:8d:5c:88:61:63:98:e1:3e:f0:89:7a:eb:
ad:e1:77:bf:be:cd:8c:0a:85:26:5d:46:3c:c1:dc:71:cf:44:
f7:8d:62:70:e5:34:6a:08:7e:d1:0c:d8:e9:dd:84:b9:7f:8d:
03:8c:f3:33:fd:43:74:bd:d6:e0:8b:20:81:88:67:cc:c7:2b:
ba:c3:6e:c2:9c:5b:58:6d:af:7d:81:1a:04:d1:22:34:75:a8:
0c:cc:70:db:82:4c:bf:c6:6b:c2:cf:a3:b0:a4:8d:21:0f:26:
38:29:ae:9f:d4:e4:dd:74:dc:ee:4f:13:67:12:6b:ae:8f:76:
31:dc:0c:73:6d:28:db:68:6c:a3:3e:ce:7c:b1:30:43:00:c0:
eb:df:6f:a1:89:6b:a3:f8:fd:bf:90:79:f3:6b:f9:61:b6:b1:
44:e0:c6:28:19:f0:cd:48:3e:44:b9:0f:7f:6b:4d:36:a3:31:
ab:09:6c:ce:e4:b8:60:54:4c:3a:92:84:35:cd:64:d2:82:f9:
05:24:a8:13:2d:f9:04:ff:54:99:fc:b9:bd:f9:93:6b:ef:10:
1d:5b:54:91:a4:6e:4b:70:42:65:88:00:ee:0d:95:d4:67:ea:
59:c2:f3:05:2b:df:2f:87:91:6f:31:37:b0:21:04:76:f8:a5:
71:03:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:46:21 2025 by rpki-client