Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa
File: 871d8d50-3938-3054-a9bb-27338048e4d9.roa (raw, json)
Hash identifier: S1ZFAjRDyMMp/+YC8XOZx1QFuwsDLVAnvmVLnY4g1JQ=
Subject key identifier: A0:F3:24:27:C3:08:9E:96:C0:7A:F8:21:13:A3:62:1B:68:22:66:8C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EFEF886C01EA8FC1C317DD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 7029
IP address blocks: 173.213.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:88:6c:01:ea:8f:c1:c3:17:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=01908dcf-eb76-4dd0-8bae-39b67aa527f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:16:3a:0b:03:36:c6:9a:ec:3b:12:3b:a2:
7a:2b:ed:c0:aa:61:fb:f3:3a:d9:6f:33:c8:89:5b:
22:78:41:ac:38:07:0a:40:0c:63:b5:ee:78:0a:bc:
3a:80:a2:2b:c4:df:93:b7:f1:86:1b:72:cd:bd:33:
64:59:7e:df:fe:01:60:48:aa:3d:c9:36:05:d7:7f:
76:9b:17:c7:ac:49:6a:68:9e:8f:cf:a7:e0:6c:9e:
d8:e2:b6:fb:ae:77:64:2b:d6:dd:74:15:32:ef:6c:
7a:6a:af:5b:2c:e1:6e:33:40:55:1a:e3:d5:39:0e:
61:e2:86:e7:ca:b7:5f:50:ba:d1:68:68:36:ee:76:
f3:61:02:4d:81:69:9e:ef:dc:54:b6:86:9c:b9:74:
a5:c2:c0:23:90:59:ec:72:22:3f:ec:24:d2:10:9d:
1d:29:f6:ae:64:fa:cc:bb:d5:7d:32:ef:ed:ec:ca:
b3:54:45:4b:e2:f8:c2:37:38:8f:5d:3c:e2:53:e5:
73:dd:38:5a:44:47:b3:c5:92:a5:79:40:0c:c9:26:
3c:08:ee:1e:d2:ff:26:54:34:69:be:27:b6:0f:d6:
58:ae:cb:3c:ce:db:7c:d5:bc:bf:a6:14:e8:9b:f9:
b8:3b:62:ea:cd:33:b9:8e:de:03:63:1a:e9:ba:32:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:24:27:C3:08:9E:96:C0:7A:F8:21:13:A3:62:1B:68:22:66:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.213.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:1a:6a:9a:bc:4c:ee:d2:6d:b5:aa:13:dc:be:28:a8:ff:08:
1a:87:8b:0b:1b:b8:0a:b2:86:29:d4:2f:8d:23:0a:9c:44:d5:
19:a7:4e:64:67:7a:e7:de:a7:a5:a9:93:b3:74:a1:75:f4:69:
ea:54:3d:6f:87:ac:f1:0f:8d:7c:bc:86:47:3d:86:91:35:cf:
a2:bc:ca:fa:bb:fc:e9:e0:98:59:08:4e:aa:34:0f:21:ba:78:
02:7f:bd:82:e9:f6:bc:ce:43:8d:e9:e7:a6:dd:d4:8e:23:4c:
cf:47:f6:3e:41:a0:4b:3d:d8:9e:8f:89:5a:be:94:c1:33:09:
92:93:e0:2c:24:94:5c:52:8f:90:6e:7e:d7:66:10:89:75:86:
12:74:a2:64:be:ef:6b:e4:35:c2:a7:b8:c7:35:c8:d7:42:bc:
30:77:c0:f1:d9:be:b7:0a:7b:77:3c:77:42:bc:d0:a0:d9:cc:
a8:c3:b0:27:eb:4d:b2:ca:28:e3:d5:c1:49:3c:bb:f2:b1:08:
68:10:67:38:67:6b:44:b9:a0:a7:52:5b:66:5b:51:3f:6f:11:
1e:9f:75:08:af:f3:59:3a:d5:56:27:18:99:c2:0c:4b:01:d0:
5e:9c:5d:ad:90:27:11:99:4d:87:2a:91:09:60:0d:c1:32:ae:
16:e1:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:22 2025 by rpki-client