Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7500a01f-bf0f-3740-bd0e-ecec7be88678.roa
File: 7500a01f-bf0f-3740-bd0e-ecec7be88678.roa (raw, json)
Hash identifier: l+UZAn5jJHw5fqNMktB5y9paCmeXT2hD/I1NI0AIpoI=
Subject key identifier: E3:F6:6A:3C:31:3B:E3:7E:BD:27:F4:A4:25:11:40:45:40:94:22:F4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FB7811CB0A0DA77AEB6D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7500a01f-bf0f-3740-bd0e-ecec7be88678.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 67.141.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:b7:81:1c:b0:a0:da:77:ae:b6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=0871fc8a-614f-41d0-95b3-288a351c6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:28:3f:f8:dc:00:7c:33:92:b2:67:6f:a0:
34:1e:1c:74:b3:ba:ea:98:84:68:c4:2e:91:1d:7c:
24:59:31:d4:45:bd:08:60:4a:14:c5:c2:ab:82:f6:
1a:e0:84:a3:f0:f3:26:de:20:c4:32:07:c9:d4:ff:
f4:ea:72:91:3f:8a:f5:e8:4c:5b:b0:50:9c:c2:4b:
2f:28:1a:0d:37:87:73:ca:fd:bb:22:e1:6d:9c:9a:
2e:24:55:23:b9:04:eb:bb:b3:e4:42:5f:a8:01:1c:
75:40:41:39:80:28:0a:ac:c5:6e:f3:86:d7:3e:f4:
ad:e1:d1:79:bb:fd:c5:29:4c:e4:bc:5a:1e:44:6d:
64:5a:c3:a8:6d:c8:05:1f:5e:c3:18:85:ea:aa:14:
8c:8e:72:eb:10:64:29:a1:65:71:c2:4c:cc:08:4f:
6f:2c:7f:7b:6e:aa:3e:3f:6b:52:6b:84:34:e4:8a:
63:dd:19:38:c1:25:23:21:3a:12:e5:d9:c4:38:1d:
d5:df:e0:09:bf:e2:0b:5a:02:19:8c:bb:cc:85:9f:
11:82:a0:6d:af:d8:9c:6d:7a:71:e8:ce:06:45:43:
2d:d1:9b:42:89:7a:ba:36:49:a1:01:fc:85:1b:ff:
e9:2f:96:fa:71:60:35:db:68:c9:a0:a2:cf:75:58:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F6:6A:3C:31:3B:E3:7E:BD:27:F4:A4:25:11:40:45:40:94:22:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7500a01f-bf0f-3740-bd0e-ecec7be88678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:50:97:22:e0:f5:6b:03:e2:5f:18:16:89:b9:9e:36:4e:d0:
78:b8:f1:c3:79:5a:63:f2:30:33:b7:14:da:8e:21:00:7f:5a:
0e:b5:f6:dd:ad:b9:fd:9c:a4:55:3d:ac:11:70:9e:1f:3a:3e:
e0:87:79:05:79:26:79:88:af:0b:a0:56:e0:89:c5:20:77:b5:
7b:ef:c2:26:e3:5e:54:63:5a:7b:89:3c:b9:f3:40:da:08:9a:
01:d6:ec:ed:a6:5e:6a:f8:c3:67:55:7c:b6:61:4f:84:76:55:
63:42:42:8a:ec:25:2e:d6:5e:2c:0a:41:0f:b4:27:9e:3b:c9:
f4:34:d8:17:61:14:39:2c:4b:f5:02:d1:95:b5:24:8f:fc:de:
16:8e:5f:71:99:15:f5:cd:92:1c:ed:4e:67:ac:d0:ea:e4:1e:
ae:1c:c0:ec:ff:9b:21:9a:e1:84:20:27:47:4a:82:ba:6f:a5:
53:57:69:02:76:be:97:a8:7f:fc:c0:dd:71:d2:39:f9:b4:a8:
3c:d1:5e:0b:bc:0e:ad:2c:9e:9d:cb:66:7a:18:5a:39:b7:54:
02:8a:eb:f2:77:14:3b:e8:d8:2c:7a:7c:4a:24:af:03:ed:88:
34:92:99:f3:e9:07:22:26:71:25:28:92:b9:d7:be:1e:47:60:
5a:e0:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:43 2025 by rpki-client