Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa
File: 37ba3cd5-c664-374e-a449-0a19748669f1.roa (raw, json)
Hash identifier: OQKLxbkY4Nd+BVbEfDqgmK22Q9YP3Mi53RZEBFLboG0=
Subject key identifier: 9E:0B:EA:F4:C4:4F:54:6F:F9:48:D6:8A:08:57:EF:54:4D:F9:83:C4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A36932377E45A96A5FE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 173.189.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:36:93:23:77:e4:5a:96:a5:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=4843f94f-2aa9-4f01-b7b1-ea35f9812217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:36:9a:bf:a1:ee:e6:28:b1:aa:fb:dd:b9:
d8:c9:69:34:37:6a:53:79:f8:b2:06:e9:a2:98:d3:
e0:36:cd:5d:be:ee:65:e6:7d:c9:be:6a:ea:28:f0:
b0:a5:a9:80:8d:d2:0d:06:99:55:db:49:04:84:6a:
4f:37:87:86:d6:c9:d5:32:e7:54:58:5e:4c:21:48:
8e:43:18:f4:1a:22:0c:70:4f:4b:71:78:17:2d:56:
1e:c5:ca:7f:54:7b:2c:14:1b:65:e2:c6:a7:f2:64:
31:5f:6d:6d:11:12:d0:fa:66:6b:b6:6f:47:e2:35:
c1:f3:97:55:e5:fa:03:00:98:6a:d9:bd:49:bb:dd:
6b:de:44:53:36:55:84:ae:6c:b9:f3:7c:b6:9c:51:
ce:dc:2a:a0:5e:bf:ff:ca:e4:7a:a7:4d:f9:b1:3a:
b0:ff:25:53:86:cd:a9:4e:01:96:4e:ee:cd:ea:b6:
c4:ff:20:d0:f2:3a:4a:6e:6f:ef:e2:5f:89:88:0e:
fb:03:6b:15:e1:b2:16:ff:f4:bd:a2:35:be:43:b6:
b1:83:76:f1:84:85:8e:ba:16:6d:02:52:a7:37:ba:
af:68:02:38:31:23:22:4b:a6:6a:15:72:c4:f7:0a:
12:f2:8d:73:70:39:30:af:64:5c:31:06:3b:50:5b:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:EA:F4:C4:4F:54:6F:F9:48:D6:8A:08:57:EF:54:4D:F9:83:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:28:ef:3e:4f:93:93:d2:56:aa:e7:d4:1e:56:22:66:e0:66:
43:6d:2f:6b:c1:ab:92:e3:15:59:91:b7:a9:67:16:93:ea:00:
a8:62:a4:e1:35:43:28:ca:b4:12:a7:71:f8:11:48:da:4a:95:
8a:9b:5d:dd:38:8f:83:56:bc:71:2a:d9:e7:8e:a1:ae:97:72:
00:90:85:cd:ca:c1:8f:cf:06:0e:75:26:9e:b2:02:cb:26:eb:
46:18:05:98:ca:31:56:19:8b:48:dd:a7:d6:36:8f:7a:c8:c2:
59:8a:62:3d:8f:4f:19:9e:37:d4:74:df:f9:6d:a3:68:03:cf:
25:7a:96:cd:4f:28:00:e6:f9:eb:da:bc:d0:30:11:3c:00:a3:
3b:6d:dc:bb:2c:e1:6a:40:95:95:73:e1:91:f9:b9:01:d3:74:
e2:43:df:2a:61:8b:45:fe:ff:7f:59:32:d3:d4:42:61:73:fe:
02:c3:4a:92:25:7d:52:c0:fa:37:09:c5:86:87:95:6f:f1:43:
f7:c6:70:81:4a:79:5f:0a:b8:b8:60:43:3c:40:7d:62:00:2e:
b4:85:2f:6f:ce:0b:76:8f:1f:90:ec:d6:5b:cc:99:92:3f:47:
26:11:6b:43:fa:2a:6d:22:2c:0c:b4:ce:ce:7a:7b:c8:4c:13:
a6:c5:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:20:20 2025 by rpki-client