Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa
File: 60901289-8f58-32fd-a99a-a58e61c82919.roa (raw, json)
Hash identifier: 1OcxrSio5BKUVp0LtkQSgM9+EIXG0pTXZKQGYLXdACg=
Subject key identifier: A7:1A:01:37:BD:C0:83:57:46:F5:76:9D:A3:BB:99:CD:B0:80:19:B1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550864F1CCE534C1EAEC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 207.170.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:08:64:f1:cc:e5:34:c1:ea:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=f97b6e68-1879-4699-9cb5-ba67065e6fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:06:da:26:5b:d8:be:16:80:8f:81:ae:8f:
d2:72:04:52:43:8b:6e:4f:f7:15:bf:6a:80:d0:08:
65:74:f4:82:95:97:fd:a0:2b:13:95:f8:53:28:29:
51:01:fa:42:ea:ad:14:b5:10:30:60:1b:7e:42:3a:
c9:a0:49:c5:83:bf:9c:11:09:90:6d:f2:3c:06:48:
4c:a3:ee:f5:cd:6b:28:09:1f:e8:fb:f6:aa:57:94:
45:cc:06:e5:c8:a1:39:88:54:d0:30:c8:62:c7:3a:
9b:8b:ff:dc:e6:40:00:8c:59:61:0f:9b:48:7c:e9:
32:b2:b1:1d:ff:79:25:00:f3:99:a5:e6:0c:89:f8:
b3:28:20:2f:72:ad:89:8f:0b:bd:4c:52:cc:62:91:
26:52:02:3b:56:11:c9:00:26:62:91:69:19:42:01:
c9:33:83:36:f1:18:56:d2:fb:a8:07:11:91:f4:75:
50:d3:03:8b:61:2a:33:fe:2a:27:55:e2:f7:c5:e5:
e2:06:b2:47:e1:7a:34:d8:41:3a:cd:31:ef:ad:55:
56:72:28:ea:ca:af:6d:68:ce:9f:57:1c:90:2c:99:
03:5d:14:19:e5:fa:d5:12:a3:ba:7c:8a:33:58:36:
35:eb:1a:81:69:ed:51:39:56:ea:d4:10:93:25:27:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:01:37:BD:C0:83:57:46:F5:76:9D:A3:BB:99:CD:B0:80:19:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.170.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f9:ff:fc:68:7b:39:2a:a6:48:9d:7d:21:1e:2c:13:f8:6f:
ae:31:25:ef:74:a4:20:1b:9b:82:33:7a:55:6e:93:1e:bb:36:
6d:f2:b7:92:0e:46:f0:b0:0d:ea:1a:e4:db:1f:c6:1b:86:e6:
52:2e:29:29:b5:d8:88:3d:ce:50:b0:33:8b:1e:03:9a:fc:24:
e9:3b:2c:3f:5b:d6:0a:5a:b3:b4:20:f1:87:fa:41:c8:6e:40:
a0:dc:63:99:25:dc:2d:3d:10:55:9e:68:03:86:fe:f6:5d:22:
2e:9c:fb:d8:37:22:08:c2:70:c7:cf:f8:69:ad:c8:21:fa:2b:
dd:8a:e1:4f:f1:9f:8f:9e:b3:a8:a3:54:49:06:4e:76:b9:2c:
09:b8:e8:64:2d:60:6b:e4:c1:95:fe:3d:76:d6:91:00:fb:a8:
54:b7:fb:a0:96:cf:84:af:a3:f1:be:c7:a8:37:c2:6c:59:2a:
87:29:30:2c:a4:77:4d:5e:89:8d:37:16:2d:33:d6:f8:4c:51:
94:ce:e2:0e:4d:3f:14:35:f1:29:51:b1:1d:97:4b:f0:80:bc:
86:c4:94:1d:ad:0c:37:9a:97:ca:54:e7:3e:32:01:55:64:6c:
79:65:bd:cc:6e:ff:c6:22:17:3b:35:ef:77:a8:5f:1a:14:0a:
3b:23:69:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:13:50 2025 by rpki-client