Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa
File: 4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa (raw, json)
Hash identifier: fzx7zq0HPA7+PPqlgbJzmNvn1s3AaJdTPChQBs597BU=
Subject key identifier: FB:9E:61:8A:9A:A7:76:2E:69:85:ED:76:8A:55:99:20:E6:97:80:FA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC871A4201E2757622040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 173.186.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c8:71:a4:20:1e:27:57:62:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=072fcfa8-0736-4232-af69-d24300af6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:c6:a5:c8:45:41:fd:e5:67:e9:6c:bf:e6:
61:5b:16:02:55:1c:8c:10:3d:eb:66:da:13:7f:9e:
4d:5b:cc:08:7a:6c:ac:86:ec:00:c0:7c:a6:2c:eb:
78:e9:2f:ee:ff:a8:23:57:f3:8d:a3:51:38:29:f2:
e2:03:0a:5d:1d:03:b4:74:d6:c7:ce:81:1a:fc:cc:
dc:16:8d:3a:e1:a5:7f:44:50:00:e2:b0:df:49:52:
24:82:1d:65:69:89:32:de:ca:0f:fa:51:7d:a5:38:
52:27:e0:0c:70:16:45:46:dd:ef:a5:fe:00:fb:cf:
2f:4e:41:95:ce:ab:f0:93:43:75:b6:35:8b:e6:71:
4b:70:1e:c6:0a:c3:c6:71:41:3f:97:4f:ee:f0:11:
8c:d6:69:09:42:85:b4:82:5c:76:d2:9e:2a:00:cc:
50:a7:c2:2b:97:f7:fb:0c:89:48:9a:a4:41:c3:3d:
07:06:10:cd:9c:48:53:ab:1a:f8:62:7a:2f:87:2b:
7d:bf:41:83:01:aa:e9:29:bb:bc:45:a0:99:8e:42:
e8:8e:32:b4:c3:b4:fd:f1:7d:6c:52:57:31:5d:e8:
78:44:8c:0a:1f:0b:9f:6c:b5:6d:7a:37:18:5d:cc:
5a:b4:94:0d:cb:d9:47:b2:8e:7a:ed:7f:a7:63:dd:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:61:8A:9A:A7:76:2E:69:85:ED:76:8A:55:99:20:E6:97:80:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d7:cb:98:e7:f6:8c:ff:5e:82:33:d8:0a:05:62:7c:13:c8:
4b:bb:5b:7f:4d:49:3c:cf:db:74:e9:e3:ca:17:09:1d:42:41:
a0:dc:6f:b5:4b:cc:7d:35:70:48:4b:cb:50:da:ac:24:e2:91:
c7:ef:0c:d7:34:09:18:2b:76:6f:13:38:80:8d:5b:06:73:ca:
97:e0:94:66:91:23:87:3a:c6:08:24:13:15:f7:6f:88:71:8c:
84:c0:90:dc:01:47:a4:99:33:28:fa:bc:e5:ec:a4:92:49:36:
24:3f:0f:a0:d2:ab:cd:97:57:71:01:75:40:eb:6a:77:97:8c:
a4:f9:8c:32:c1:5c:37:a6:1d:e1:ee:5d:65:b9:5c:fb:81:31:
47:4e:f3:59:fe:ed:80:4e:81:8a:e3:2a:06:06:8f:3b:45:d5:
d5:0b:69:fe:9d:47:e6:87:40:98:d4:bb:53:fb:02:ce:57:36:
d6:6a:67:da:28:df:b1:77:ca:68:d6:3e:92:c8:38:fa:59:71:
1e:a3:34:10:39:e3:36:87:5a:a8:5a:0a:25:e5:48:f1:d8:00:
75:fa:b5:b9:ce:0d:35:e6:5c:7f:ad:f1:d5:ed:7c:61:e7:0a:
90:ef:59:2c:1c:46:3e:6d:c2:d1:7d:53:2a:e3:7e:15:df:f4:
b5:1a:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:28 2025 by rpki-client