Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa
File: 84bad8c2-46cd-3a42-80d0-ff2891389b87.roa (raw, json)
Hash identifier: /LScaZFesCrmnEvikfs+oVDUQGmAMZCUqHVsUuqw+so=
Subject key identifier: FA:F2:1E:C7:63:F7:F0:C7:B7:9F:69:43:AF:DB:AE:22:62:B3:A8:BB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553FB4A147EBC28D0FC780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:3700::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:3f:b4:a1:47:eb:c2:8d:0f:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=5e104096-ae27-49b5-9309-d03994d2baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:11:19:e9:df:55:eb:b0:b1:41:74:45:c0:
f9:5e:2b:32:08:9b:ed:22:53:55:85:ae:8f:c4:ef:
f7:7e:10:d5:9c:7f:e2:b3:75:a0:b6:14:27:a4:58:
a6:98:b1:ba:06:e7:09:06:f3:e3:9f:2c:74:07:0f:
c7:61:44:39:90:f9:ef:c7:f6:f6:38:15:3b:94:40:
fd:e3:65:32:6e:69:c2:60:0c:70:44:5c:b6:cb:40:
fa:a8:7d:bd:07:8d:0d:94:6e:a7:20:78:19:8c:31:
a1:4e:6a:c2:d8:59:dd:cc:d6:2c:25:68:f3:b9:03:
c1:89:d1:e2:de:c9:00:14:4a:31:07:cf:e7:69:8c:
ed:a4:0f:2a:48:dd:64:60:05:a3:dd:d5:90:aa:7a:
9e:09:2e:f8:7b:74:e5:99:4d:0f:32:34:00:1e:a8:
01:86:a2:b2:fd:4a:6a:5f:b3:e9:40:e7:b2:1b:2e:
b6:52:a1:8f:98:14:5b:c6:7d:ef:1e:31:d7:2e:29:
fc:ea:ce:54:97:56:7a:6d:e1:ed:10:cd:13:91:36:
ca:1e:6a:48:40:2f:da:68:ce:d2:97:e7:18:ab:f7:
aa:b2:5b:eb:e6:62:80:64:41:57:41:7c:d1:09:00:
a3:6c:e7:c5:3b:5f:31:6e:bf:1c:00:31:67:3f:4c:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:1E:C7:63:F7:F0:C7:B7:9F:69:43:AF:DB:AE:22:62:B3:A8:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3700::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:d4:02:59:af:ac:9e:83:d5:ea:d8:80:17:af:c6:f0:4e:94:
fe:95:ec:ee:b1:7b:43:23:fd:56:b9:f2:36:3e:1a:8c:59:a1:
1d:b2:08:5c:9e:60:f4:f8:b5:05:f6:e1:06:79:b8:9e:33:a3:
4e:5a:44:32:09:97:bf:a8:25:45:77:19:c7:48:1d:82:52:ee:
51:2d:b2:15:a0:67:93:5d:f0:a8:d4:36:c6:f9:53:7e:75:80:
0b:49:e3:2a:61:24:7b:b7:3a:de:4e:2c:bc:02:59:cd:e3:b4:
6a:15:74:76:50:8b:39:e6:bd:8e:01:b8:96:f5:33:8b:d8:16:
63:74:1f:81:5b:26:2b:96:03:8e:a7:d5:67:ca:aa:85:2a:03:
59:01:40:57:53:41:3c:c2:2c:77:d7:1d:93:da:18:b4:8d:81:
5a:6b:16:e5:cf:3b:88:89:58:b9:0a:60:19:02:00:13:f5:63:
ad:55:be:08:59:7d:46:7d:ce:21:f0:0c:f7:b3:6d:24:2a:5a:
c1:0e:f7:11:30:84:65:de:f4:dc:ec:99:ec:40:27:63:d1:73:
32:75:05:67:32:1c:ae:82:cb:e2:f7:c3:8d:bd:0d:a5:71:72:
b2:de:4a:a0:a3:c6:bc:4f:6d:32:e9:48:2a:13:9b:03:09:67:
a8:0b:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:49 2025 by rpki-client