Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa
File: 6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa (raw, json)
Hash identifier: zVhp0VJv/TFx6/2+QM6a1sacusOmTzYUFI28dRLqHoE=
Subject key identifier: 00:BA:D9:71:7D:B5:14:6D:FB:65:C1:36:76:48:81:A2:2D:28:22:B0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1552F8F9DC0D685D50B9FA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 71.30.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:2f:8f:9d:c0:d6:85:d5:0b:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=ca8b83a3-1d62-48dd-8ac9-6f44db7a9e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:16:c9:89:e6:4a:d4:a4:12:ee:a9:c4:f2:
a5:47:3b:d8:29:29:10:82:c9:5b:06:e5:fd:ed:45:
18:51:0f:7e:89:65:97:5a:7d:00:74:cf:9e:f9:c2:
bf:f4:2d:dd:d3:66:80:38:17:22:b9:39:23:05:b9:
0c:63:d9:68:a5:de:43:f9:4b:16:4f:6a:5d:da:1b:
ac:8a:d7:e1:6f:3d:00:8e:e2:61:ea:12:83:50:b8:
65:33:9d:5e:f2:17:22:ce:50:78:80:03:6f:44:4b:
12:92:db:92:8f:9e:f1:99:b6:c7:68:7f:c1:53:d4:
0b:8d:71:2f:24:10:64:4b:d9:fc:1b:df:66:b9:a2:
be:94:70:35:11:3b:10:6d:85:36:57:5c:b7:6d:86:
10:1f:29:10:37:b0:0d:22:05:e4:91:63:c6:2e:7c:
e3:82:75:e9:2d:0b:ed:35:d1:8b:c9:71:97:39:75:
48:91:25:36:18:82:17:2c:55:13:b1:00:32:23:3a:
75:24:e0:62:19:19:e1:0d:e1:33:66:8c:d7:92:84:
6f:3e:50:79:c5:3c:55:a6:74:7a:27:4e:ea:5d:06:
35:64:31:44:34:04:cb:f4:75:0e:f9:ee:a0:28:5a:
d7:4e:72:52:94:8f:35:40:11:16:30:42:0a:f8:11:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:D9:71:7D:B5:14:6D:FB:65:C1:36:76:48:81:A2:2D:28:22:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b1:f8:61:bd:a4:b7:a2:00:fd:61:88:b0:9d:c4:45:b4:05:
c5:5c:b3:27:23:56:97:c8:10:51:58:a8:af:1d:af:6b:9c:68:
82:02:eb:e6:ac:bf:23:90:66:04:32:b4:a1:80:69:77:f1:af:
e0:67:a2:a8:df:cd:cc:1b:28:39:fa:ba:75:ce:a5:39:cb:07:
95:d4:08:1c:f4:9d:db:e8:b2:0f:26:4e:80:e4:17:7c:ff:5a:
5c:0e:53:8f:19:02:b4:e4:de:61:8c:a7:53:b7:ba:0a:c9:bf:
10:8b:5d:3f:20:71:08:78:9b:6f:9d:29:c2:9f:03:b4:95:2c:
53:67:a7:b1:12:80:26:65:53:a3:0c:20:56:2e:f1:da:dd:c1:
1e:1d:b5:dd:bb:14:8c:d0:57:cd:bb:9a:4c:26:fa:6d:8f:43:
37:db:41:d9:85:c6:db:56:c0:10:ec:4e:83:2a:58:f7:9e:87:
c1:15:af:72:2f:e8:67:0e:e9:27:2c:de:57:db:96:5c:a6:38:
61:97:db:5b:04:3f:a3:48:93:b8:81:7c:36:00:13:3b:a6:b6:
cf:f8:d3:e5:d3:4d:eb:e6:a0:58:17:d2:d1:8b:e7:a3:cd:ec:
4c:89:be:7b:25:fb:e4:da:86:bd:f8:9a:a3:93:fe:c5:e4:03:
83:b2:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:37:39 2025 by rpki-client