Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa
File: 3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa (raw, json)
Hash identifier: HYCvF79p13TW5kwtJlXyxErvr5Iyx9JQCypdwV9olyw=
Subject key identifier: 59:06:53:D6:00:A0:B2:2E:C2:40:0A:1D:9E:0A:BE:28:AB:9C:4F:A9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848530B0950A0E060C0788C5960
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 209.255.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:09:50:a0:e0:60:c0:78:8c:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=0334e929-594a-48c8-8299-4a05352cd50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:2d:74:6e:19:77:cc:bc:3a:21:bb:05:1f:
fb:6d:dc:28:e9:c6:de:38:e7:88:df:f1:5f:e3:83:
f2:3a:10:52:34:96:a7:1e:1e:0a:b5:e9:63:49:cc:
35:c5:77:ae:1c:4a:59:0e:0a:d9:7a:df:f2:49:9b:
73:27:97:00:84:f7:a1:be:9e:55:2d:a2:59:26:7f:
7e:94:0b:aa:87:a6:61:b9:2c:b8:a1:2f:4b:f3:8b:
2a:11:ba:0c:f7:8c:3b:25:14:1a:0f:7d:ad:29:29:
fb:76:ae:a6:6e:f4:30:b6:81:48:0d:7f:f0:40:c3:
a4:95:87:bd:35:ce:a7:59:c6:2f:21:e9:52:90:c7:
38:4e:18:00:05:a5:00:da:3a:bd:01:88:6c:5c:f4:
f6:ef:84:c3:cb:fb:0e:37:78:0b:65:cb:9b:f9:05:
81:3e:49:d5:c8:65:8d:35:11:2f:5b:5b:57:96:9d:
48:26:3a:1e:15:ff:c3:0c:01:5d:55:6f:f3:97:b1:
8d:7f:e9:0f:d1:a8:ab:e9:a1:af:54:90:74:54:c2:
1c:fd:b6:d4:b7:f0:71:e3:a7:dd:40:e8:f7:34:55:
f7:a0:ac:dc:75:c3:43:41:ab:cf:74:dc:94:58:69:
d9:7f:90:77:9f:c3:24:4d:ed:7f:4e:11:1d:23:db:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:53:D6:00:A0:B2:2E:C2:40:0A:1D:9E:0A:BE:28:AB:9C:4F:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.255.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d8:92:bd:31:64:20:4c:bf:db:93:66:38:de:7b:49:b3:ef:
fa:c5:04:a0:dd:fd:7c:d3:b2:50:cc:54:5e:05:31:86:94:10:
15:9b:8b:d4:41:5a:09:39:a2:bb:65:a6:58:76:c2:74:d2:61:
ca:68:88:c0:de:05:10:59:33:02:a7:33:8a:d7:3a:27:46:d9:
b6:34:7f:57:43:c8:c8:f1:3a:d9:da:30:86:2c:d1:5a:1f:5f:
34:2d:50:03:46:3b:bb:3f:d7:4d:ec:e1:b5:d5:0c:21:61:88:
85:4a:0e:16:00:56:ff:26:07:88:68:60:e6:ef:d8:4e:3a:a1:
15:fd:7d:ba:ba:6d:53:73:ec:b5:03:cd:41:71:62:f8:77:87:
e6:2f:bf:84:32:41:7e:c8:d1:6a:f7:4c:2f:8e:f9:8c:22:1f:
17:34:af:90:6a:49:b2:83:dc:1d:92:97:95:d3:a8:0a:65:ef:
2e:76:f9:c5:f9:d2:70:e1:66:63:94:3d:ad:59:ef:d3:e8:d7:
db:ef:e8:9b:59:e2:d3:cd:37:b3:d7:32:e5:94:af:10:ae:b3:
26:49:40:c6:b2:58:e8:d0:fb:5b:bd:e8:05:13:2e:8b:7d:57:
a0:a8:00:0a:01:55:c0:14:8e:ae:b3:1c:69:be:a5:28:a1:53:
0f:1d:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:52 2025 by rpki-client