Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ad7fb4d-d918-39be-839e-96e174f79acf.roa
File: 4ad7fb4d-d918-39be-839e-96e174f79acf.roa (raw, json)
Hash identifier: Zo2CgOwO4S5w8dZ1qoGFy/gOhFF4ZUhQoZ+4QsAvRF4=
Subject key identifier: EE:25:28:07:CD:E8:FC:24:7B:62:F6:D1:85:61:80:97:1B:E9:41:85
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1552BB02577A5F258C89600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ad7fb4d-d918-39be-839e-96e174f79acf.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 64.196.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:2b:b0:25:77:a5:f2:58:c8:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=2f2defda-6e13-494d-b707-e7b16b2ef983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:8b:ac:ee:0d:44:4d:80:ef:a5:df:dc:18:
11:af:77:bb:46:28:49:d3:9b:ab:2c:e4:ef:e4:9a:
da:b4:44:a4:9d:87:70:1a:5e:82:b3:11:1f:10:1b:
12:32:2f:04:30:b5:d8:7e:e9:df:23:9b:e7:36:fe:
e4:e6:c1:1f:a0:f6:2b:87:43:28:25:ac:36:96:03:
13:5a:ec:8b:8b:4b:dd:0d:54:95:04:b4:6b:f2:72:
a4:c8:68:b7:d4:53:ec:f0:b8:3c:49:5d:87:50:79:
e8:34:04:70:54:7d:03:3b:54:2c:8b:41:b3:50:c2:
96:55:49:1d:c3:ad:d5:4c:49:1d:b2:c9:63:21:a1:
ec:bb:e1:47:a3:84:65:90:39:3f:a4:22:ec:50:fa:
6e:e3:0d:c9:7e:14:f9:de:72:57:b6:0f:ce:8a:20:
f1:97:d6:73:ba:5d:fd:0d:47:94:53:2d:13:9e:0b:
3e:b4:c0:4a:71:4a:0f:64:39:3f:be:7a:01:36:43:
52:ee:d0:91:a8:51:ac:e5:7e:01:70:1b:67:25:7f:
82:dc:ff:f4:a5:7c:1a:b0:c2:a4:b6:18:af:ac:82:
e5:d7:d0:2e:94:78:74:80:00:d7:4d:fa:56:6e:70:
69:f3:32:3d:14:66:13:5d:3b:3a:21:33:6b:4b:b4:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:28:07:CD:E8:FC:24:7B:62:F6:D1:85:61:80:97:1B:E9:41:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ad7fb4d-d918-39be-839e-96e174f79acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.196.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ed:4a:c4:3f:ab:fc:d5:8e:37:39:e9:49:3b:6e:70:08:fe:
c9:86:4f:de:38:78:03:1a:52:e3:38:01:fa:b3:12:33:98:4f:
e6:c5:3f:de:5c:36:19:26:7d:96:21:1e:84:24:4e:ad:fe:d8:
4d:18:06:1a:66:6e:e7:a0:b4:ed:69:c9:50:48:64:4e:49:2b:
98:f1:44:b8:26:92:6f:fc:d6:1c:58:c6:1f:11:94:24:b4:fb:
46:b5:de:3c:0c:71:ec:9d:15:45:cc:c4:c0:53:9f:c6:3e:4b:
7d:7c:75:8a:3a:3f:a5:dd:e8:e8:48:8d:f0:da:3e:be:32:13:
ed:3b:14:4f:a3:08:bb:b8:9f:40:23:32:2e:16:0e:95:a4:64:
55:e7:69:cb:ac:bb:ed:3c:2c:f5:bf:75:68:88:27:1d:c1:3e:
d8:e9:55:43:f4:08:de:bc:20:d5:12:60:07:35:3d:8b:fa:76:
7e:44:7b:7d:f5:7b:56:a8:dc:5a:cd:1e:ce:ea:c9:eb:49:46:
f9:ff:82:f2:3f:9f:db:8d:a7:69:50:4d:6c:41:56:3b:11:2d:
c3:09:df:83:ca:06:3a:cf:cc:16:76:8a:11:3f:95:a0:9b:04:
9c:b8:17:2f:d2:c1:d6:b9:d8:07:4c:0f:fb:f2:6a:bc:8b:d6:
7f:5c:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:58 2025 by rpki-client