Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa
File: 4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa (raw, json)
Hash identifier: peyBw4r2ijlyHY+fOpcILUR0w8kxCmMl6XjR2KSQyRI=
Subject key identifier: 95:9B:83:32:65:BF:26:4A:40:88:41:9B:F8:E2:75:3E:5C:A5:C6:11
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A34EE70F0DD046DB2DFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 40.142.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:34:ee:70:f0:dd:04:6d:b2:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=ab19b653-f6f2-4958-8119-874b90b213c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:b3:56:5f:8d:33:03:46:b5:1d:1f:51:9f:
84:5e:d3:fb:c6:d2:71:00:3b:fb:0e:b8:10:a7:9b:
c9:70:b3:fd:e3:a6:98:ea:67:0c:4b:cd:76:bd:02:
19:1d:90:67:f8:44:ea:e1:7f:c2:fc:57:ff:7b:e7:
bb:2d:90:f7:ab:8b:5a:1a:90:78:1e:f1:34:cd:f0:
be:b1:ea:6e:c4:7b:d1:a3:96:55:c4:e4:3b:3d:e5:
ca:e6:12:69:16:46:58:59:e6:e9:f6:13:9d:b7:88:
d9:ee:8d:8a:66:1e:1f:cd:41:90:56:29:e6:39:3d:
4c:45:63:b0:90:3b:b6:82:af:dd:a7:78:e0:d3:d9:
71:5a:70:e0:f2:66:1f:9f:e6:ad:a2:80:3b:1b:92:
5b:bd:8f:87:64:61:6c:ec:39:76:67:19:a6:45:d1:
3a:db:1b:8f:ae:88:5f:90:32:20:62:21:41:01:4e:
15:4f:e2:86:a0:ba:55:3c:ee:47:76:6d:ea:bd:0f:
e2:d9:ce:35:97:24:13:15:84:3a:87:a9:bc:b3:7d:
65:b3:86:83:af:c1:7c:f0:4a:8d:4b:03:96:e6:bf:
2b:5b:bd:33:02:87:9b:0d:7c:bb:4b:a4:c0:20:f2:
cf:8f:b5:50:85:45:29:b7:1f:7d:42:c7:89:ce:73:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:83:32:65:BF:26:4A:40:88:41:9B:F8:E2:75:3E:5C:A5:C6:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:4c:0c:88:77:f0:ba:24:1f:a7:2c:33:ec:09:38:d3:ac:96:
d3:6e:f0:c7:09:c0:df:7e:cd:ed:94:86:3b:b6:13:1e:0b:1b:
0f:88:d9:ea:4a:87:4d:bf:7c:1a:3d:94:1f:11:86:e9:f7:6e:
8d:a7:5e:81:f4:de:c8:fb:3c:b0:fc:43:3f:25:1c:0d:69:3a:
fc:65:27:70:5d:42:56:52:d0:f1:04:bd:93:48:37:14:d6:88:
6a:df:a6:1e:54:30:bd:83:00:d1:8b:65:2f:3a:61:9a:c1:15:
d1:9f:bc:e1:9e:93:a4:95:7d:34:33:4b:91:8c:ad:16:17:88:
a6:cf:21:87:34:87:bd:f3:40:49:ed:07:97:74:81:9f:f3:c0:
e0:f2:17:0b:fb:5c:47:c8:59:71:a2:51:37:b9:a6:9a:98:fa:
9d:53:fa:bc:4d:b2:87:c2:ab:71:c1:14:0a:19:39:46:c2:b0:
62:49:7b:7e:f5:d7:c8:df:ac:d9:70:42:c5:75:e4:48:d1:2a:
4b:63:54:fd:93:cd:f4:ea:fd:fe:73:46:4a:16:38:8c:dd:bb:
38:25:9b:5e:6a:1a:9a:5e:ab:67:d5:be:8f:29:b7:ca:66:aa:
c2:5c:88:05:41:78:7e:64:a1:c4:8c:6a:45:d2:2c:59:dc:74:
fb:a7:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:16:53 2025 by rpki-client