Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
File: 3bdc6966-5141-3334-888e-7e197a25c456.roa (raw, json)
Hash identifier: 6M1leMOM5QMjqqLGvGqHlZmmaPCRmKuRLzUmU5siGUA=
Subject key identifier: 74:12:EE:60:0C:F8:0D:DE:79:0F:D6:E1:FF:72:9F:8E:62:31:BE:D7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB5780946AC0379DACC84A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 71.31.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:78:09:46:ac:03:79:da:cc:84:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=16c6f3c5-d906-4763-a8ee-5dafec1266e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:7a:b0:6a:35:98:d5:d2:4c:fd:d4:12:b7:
08:e4:4f:0a:0d:1e:8b:13:fe:c0:9a:cd:59:5e:61:
83:be:ec:2d:7c:37:c5:ad:fb:6b:f9:bc:91:f5:52:
69:e4:13:90:02:74:77:4a:07:97:71:44:d6:b0:76:
f1:3d:df:da:80:d3:ee:bd:60:f6:69:d5:76:b4:85:
54:2c:a2:2a:c1:3e:de:02:5c:d9:e5:46:f2:d4:59:
03:de:f0:73:23:2e:d3:20:88:eb:15:f7:af:11:bd:
f1:b2:fa:90:bf:e0:cb:e8:50:3c:da:c2:c2:71:6c:
49:97:7b:f0:51:69:bf:d5:ef:f3:65:f4:76:2b:61:
6a:cd:ae:f6:3a:89:c8:9f:af:5f:ee:02:b4:3b:a4:
84:7c:b5:ae:3c:21:dd:44:5f:eb:fc:d7:3d:0d:8a:
da:28:17:e2:65:42:c3:02:1e:5f:38:08:0c:3f:f6:
60:7e:bf:47:19:fa:fd:84:0d:d1:bd:c4:81:a7:de:
1b:ee:8b:92:25:05:70:93:10:47:0f:7b:f1:54:db:
59:b4:90:b6:44:32:3e:ae:13:31:1e:76:f9:f4:c1:
9d:50:df:0a:e9:69:51:c4:30:3a:a7:df:43:85:83:
37:9f:38:1b:00:40:8f:b4:aa:f2:5f:f6:c0:b3:3a:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:EE:60:0C:F8:0D:DE:79:0F:D6:E1:FF:72:9F:8E:62:31:BE:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:30:7c:fc:a2:7e:30:89:ca:7d:bb:bd:db:f5:fe:84:9d:52:
87:09:43:24:fa:e8:ed:e0:fa:07:16:01:41:3d:72:ca:42:99:
f8:5a:87:ac:32:43:81:ec:6c:b5:3d:5a:3c:c6:5e:b5:96:10:
cf:88:b7:bc:dd:a6:0f:71:ab:77:1e:e4:fe:d7:e9:d9:1e:84:
13:9d:ff:c9:c3:04:9d:49:a4:9a:c9:b3:66:91:61:78:c0:82:
71:2e:ce:e6:65:c8:5a:9b:5f:a9:69:40:2e:1e:b5:87:67:47:
da:e3:45:4c:43:ea:8d:30:5f:12:db:a0:69:4d:3b:da:23:3b:
d4:de:ff:35:88:06:45:7d:db:c3:94:73:2e:e0:1d:d7:05:8c:
60:d4:8e:63:f5:9a:fd:f0:9e:e0:80:92:0e:59:7c:99:3d:e1:
44:69:11:48:5c:38:9c:d1:c1:71:ce:a9:98:0c:ec:37:11:09:
62:9f:e1:d6:83:ee:f4:b0:86:59:55:77:85:6c:e2:76:4b:fe:
ea:2a:51:68:6d:f9:34:69:0f:16:1a:01:50:83:39:d2:2a:31:
d8:ac:83:c6:09:65:13:13:2a:55:ed:5d:16:91:b6:58:a4:fe:
e8:39:46:26:08:cc:42:57:84:38:c0:ae:d7:89:b2:30:13:60:
b1:b0:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:58:59 2025 by rpki-client