Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa
File: 4cde9440-2e2e-3453-bb86-60dbbef890f0.roa (raw, json)
Hash identifier: fPwz8i+NNKG3WzxiwXRJqivqaBA3vsNRw8brXLmcnok=
Subject key identifier: 86:19:3F:70:64:47:B4:13:D4:3F:71:01:6A:C1:7E:D9:85:66:B2:21
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848037AE1F2A1598F66DB1833E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 7029
IP address blocks: 71.30.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:e1:f2:a1:59:8f:66:db:18:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=7dce20a2-1235-441d-994b-8253e19f1f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:f1:fb:ba:50:63:7f:5d:69:ab:1c:53:5f:
a6:c6:51:e7:f9:51:b5:0a:6b:24:85:ed:ad:c6:cd:
b6:b0:ac:1c:84:00:e4:08:6b:e3:37:90:76:6c:63:
3a:d3:99:d4:56:12:3d:b4:41:ee:ab:49:3d:aa:b0:
74:b8:aa:cf:18:01:d2:e0:1d:a8:f7:cc:7f:2a:fd:
87:c6:9f:11:63:e9:98:79:a3:0e:63:c7:60:fe:3e:
c7:88:16:a6:77:00:83:c1:c4:e3:fe:e4:5b:d1:c3:
5e:0c:8d:4c:05:3d:ef:79:51:81:6e:f0:c8:36:fa:
68:55:21:fe:54:16:49:d5:b0:e8:39:ae:f1:80:d0:
41:23:71:89:1c:32:c2:e6:26:f5:1e:ac:b5:e3:1d:
cb:01:f7:b1:b7:ca:8e:c0:86:32:35:47:f8:29:11:
b1:5c:69:50:43:d1:ce:8d:e0:e2:69:4c:ed:81:02:
06:07:ea:0c:c8:4d:41:df:98:49:42:8a:94:24:92:
c5:40:e7:49:99:f0:63:9e:76:9f:f8:97:6b:8c:aa:
e7:a4:ed:08:fa:b7:ee:16:85:9a:29:30:a4:66:f9:
11:9c:43:ca:81:c3:a9:05:f1:f6:96:d6:33:19:77:
c9:66:f0:bf:82:be:09:4e:9d:cf:16:3e:80:8c:8f:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:3F:70:64:47:B4:13:D4:3F:71:01:6A:C1:7E:D9:85:66:B2:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:f2:76:2a:9d:f9:38:73:d9:49:c8:a0:26:ec:56:f3:c7:02:
98:b0:92:23:ec:a8:ad:72:9a:cf:79:20:54:18:6f:46:8b:5c:
ac:5f:79:70:3f:76:35:f7:55:00:e2:2c:9a:e7:ed:7c:28:81:
c5:85:dc:94:49:f4:89:ac:b3:2c:32:ea:97:f9:5c:f6:50:41:
8e:66:fe:19:2c:f5:1b:4d:1e:10:13:de:f7:95:37:b1:6a:f3:
75:e9:a3:f0:95:86:1f:2b:bf:a1:b8:b9:98:e9:67:9d:19:9a:
31:84:76:7c:06:fd:d8:9f:ce:27:7b:5d:c0:a5:0a:7a:67:61:
6c:06:c6:51:83:bb:c0:ea:d2:c8:2c:8f:ad:f5:9b:6e:45:71:
e4:95:60:13:bd:6f:4f:3e:f4:09:f7:21:b5:2f:10:44:56:e5:
3a:bd:e0:3f:e2:e6:ac:21:58:15:2b:d1:0a:d6:63:0e:c6:90:
4c:9a:98:9b:22:40:a8:d4:fe:9b:4b:f9:64:00:e9:42:6e:93:
fa:43:2a:ab:31:ca:7d:e3:11:17:29:d7:fa:d6:03:31:53:3e:
de:30:4a:08:39:45:0f:46:5f:40:a3:c9:2d:34:95:bf:66:21:
0c:17:18:e6:2d:36:07:95:65:40:5a:30:43:6e:ef:38:ea:c4:
fe:1d:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:03 2025 by rpki-client