Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa
File: 78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa (raw, json)
Hash identifier: lXUBDeJYhFG12mJY++3edYxkDeMSo8OKdFJR/1qbuVU=
Subject key identifier: 01:B1:23:A3:BC:79:48:DD:3A:6F:83:C1:BC:5B:43:E6:5C:18:A0:53
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848143B2BB2B4D3BBEB28BD0440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 64.24.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:2b:b2:b4:d3:bb:eb:28:bd:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5b0a7295-13aa-4e1a-8ca5-d694f71d1af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:02:40:64:0b:43:de:5e:8a:c9:ae:c8:e1:
34:bd:d7:9e:b6:0c:2d:5f:66:99:e8:0f:f6:59:e1:
fb:0a:5b:3a:04:64:5c:00:1d:01:04:a8:98:16:06:
37:8b:e3:4f:a6:33:05:05:0d:87:50:fb:85:e1:78:
fa:57:16:15:b2:a1:b8:9f:f2:f9:a1:18:25:d7:cb:
39:ec:04:58:86:ee:15:45:df:8b:b1:b7:4f:70:73:
e2:3f:3b:b8:04:2a:b5:ba:97:8f:8e:ff:e9:55:6c:
13:bc:3f:2e:9a:06:8f:18:65:fa:be:b8:14:8e:f2:
91:51:1f:03:f6:59:7a:17:79:8b:08:4a:9f:61:4c:
03:93:8b:9d:fd:89:1e:3f:77:87:6c:32:10:99:ac:
e6:b6:ea:e1:42:57:de:67:7e:a3:2e:b6:00:41:3a:
44:f1:a3:df:a8:7d:1a:74:8f:d0:f5:6e:8a:e1:ac:
23:b3:20:1c:c8:37:7b:76:6e:77:39:27:5b:bb:f0:
7c:f1:3f:c9:4b:af:7b:fe:ff:10:5f:5d:53:6d:87:
c5:16:d6:32:a6:c2:21:9a:23:eb:a0:bd:f3:88:e1:
ce:60:85:75:9d:4a:07:e9:7d:a2:2b:00:bd:eb:23:
2e:e9:64:ff:e1:5c:64:94:99:83:8b:84:50:d1:e8:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:23:A3:BC:79:48:DD:3A:6F:83:C1:BC:5B:43:E6:5C:18:A0:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.24.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b2:73:70:81:e5:fc:69:dd:fc:1c:f2:b0:ff:19:18:04:4c:
9b:49:41:05:6d:c8:0d:82:a9:c6:61:4c:9f:05:8f:c0:ad:5b:
56:00:6c:af:91:08:67:0d:70:3c:eb:d9:ab:a0:af:ed:c4:38:
48:eb:de:82:66:af:ce:91:5e:36:ab:62:08:35:5d:21:f2:59:
24:0e:9f:73:e5:d0:f7:0d:30:51:28:dc:8a:dd:d4:4f:dd:7b:
2d:2c:4d:d0:02:82:eb:cf:bd:48:d4:bb:f7:95:6c:e2:9d:35:
19:0c:19:38:23:e4:fd:23:34:b9:1e:3e:48:81:15:cc:e7:2a:
7a:7f:f1:c4:ad:f3:3b:86:7f:6f:4c:af:fc:7e:f1:41:3d:c0:
39:12:83:f4:b9:e2:89:15:fc:b8:e6:c4:55:8c:7a:c1:ae:46:
7a:ec:42:7f:e0:55:7c:be:b6:df:23:b5:82:1f:a5:62:0d:ed:
3f:52:fe:7f:71:8c:58:9e:53:31:2f:b9:49:bf:06:ee:e0:9e:
1e:71:b9:89:84:a2:66:f8:50:a7:a6:ae:a7:60:f2:3c:67:0e:
50:af:34:6a:b9:f9:25:46:05:ae:0c:39:44:e7:53:dc:dc:9a:
05:d5:c2:80:df:e2:70:89:ca:65:5d:f5:ec:09:c3:34:63:d7:
7a:52:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:33 2025 by rpki-client