Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a5e550f-8687-3e50-8876-e1f855d933da.roa
File: 5a5e550f-8687-3e50-8876-e1f855d933da.roa (raw, json)
Hash identifier: ftGg6Cp8pMoHNrKcio8EZvc4vccgg9qsS3EQnNcUI7g=
Subject key identifier: EC:0E:F8:00:79:03:66:26:95:1A:FA:FB:EE:A2:A1:BA:D8:CA:97:F7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553BF48C763A44EF9B65C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a5e550f-8687-3e50-8876-e1f855d933da.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 209.236.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:3b:f4:8c:76:3a:44:ef:9b:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=cc0a85da-601f-4fc0-8b64-6a1f1891ed0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:d7:6a:0e:60:2b:6c:68:6d:eb:96:ff:eb:
61:28:32:81:7e:e4:b3:02:65:0c:87:aa:6a:64:36:
92:2e:27:7e:4a:78:ba:1a:3d:c3:97:c5:15:44:5f:
16:c5:25:cf:20:3e:f7:51:34:86:fc:fb:61:28:7d:
2c:f1:8e:f3:8f:7d:19:cb:f6:fd:cf:a2:6e:7f:7d:
16:87:92:99:86:4c:61:27:26:d8:fb:fe:64:c3:88:
4e:90:12:72:48:7f:1b:ee:bf:86:0d:af:ec:d5:f0:
ff:c1:6a:12:f6:da:39:22:e0:69:03:72:5f:f1:0c:
9f:a9:f9:a7:00:16:e9:35:9a:aa:1c:70:dc:fe:fd:
fc:34:af:b5:9d:9f:68:0c:33:d3:2b:a4:ac:39:5c:
38:46:18:0c:27:e0:43:d2:e4:1c:b9:3a:b0:9b:3a:
4e:e3:c3:e4:be:13:df:cc:6d:13:0e:d3:1b:76:21:
f5:7a:05:2a:e1:50:81:2f:57:15:63:8f:95:ea:b8:
4d:9b:82:2c:ea:e4:03:6f:96:1d:b8:05:6a:75:4e:
c8:71:95:1d:22:4f:3b:a8:65:19:a6:db:3e:fa:a8:
88:10:c2:6b:29:a2:75:4c:56:58:4f:e3:ed:ad:e8:
c0:b0:00:dc:cd:74:5e:14:b2:2e:ac:e0:a0:08:2c:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:F8:00:79:03:66:26:95:1A:FA:FB:EE:A2:A1:BA:D8:CA:97:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a5e550f-8687-3e50-8876-e1f855d933da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:30:46:2c:ee:e7:9c:67:9c:ab:7b:6a:da:1e:d4:9f:49:ed:
36:9b:d9:0a:3f:96:0b:cf:3c:f7:e5:29:b0:a5:38:bb:29:e5:
a0:0e:79:d2:18:04:c6:50:aa:c9:e5:41:84:68:d6:40:a7:95:
b3:66:67:4f:60:14:4d:b1:8b:3c:42:ab:85:fd:97:70:7a:fd:
ca:6d:45:78:fb:dd:30:7c:e5:82:9f:52:51:ec:78:a4:f6:aa:
db:42:e6:0d:35:0c:d8:cf:0a:10:89:e5:94:45:0b:7f:d0:0c:
f1:5d:02:db:0f:63:46:9e:1b:8a:90:f4:26:1a:89:1c:2f:69:
ea:55:55:56:35:2d:53:ed:f5:45:e0:6a:43:07:09:fe:c3:d9:
53:12:94:f1:77:e8:ff:bf:4a:3c:54:3c:a8:4e:45:a0:25:42:
b2:7f:53:ae:e8:70:e1:a9:99:7e:28:70:6a:bd:1c:4d:a6:31:
ee:c8:10:a1:d2:91:e5:f2:57:49:09:6a:fd:5b:0e:3c:a1:30:
21:4e:67:a7:5a:b4:8b:f4:df:87:7a:2c:8d:16:6d:d5:30:11:
f9:42:48:64:bf:02:22:63:3f:36:58:ba:37:4c:42:f7:63:e4:
fd:a3:5b:ac:5b:b4:80:6c:02:5c:af:d9:54:c0:56:aa:2f:c2:
18:9f:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:39:11 2025 by rpki-client