Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa
File: 8cf117f2-112a-3cfb-9363-44ee9405c70d.roa (raw, json)
Hash identifier: /oJRPpcrO5Hb4Y6pW6/QkNfX4UeKUdAqZQRxlnY1eSo=
Subject key identifier: D6:72:47:99:FF:5C:45:D9:FA:CE:50:3A:83:3E:B8:C3:07:03:6C:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB5747F6B93933F08A2ED70
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 50.96.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:74:7f:6b:93:93:3f:08:a2:ed:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=d4b5b8d8-f9a8-47e5-9725-14f97f1716f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:46:53:90:e3:3b:40:da:10:c1:a1:18:16:
e8:a4:8d:fe:95:d7:1d:46:d6:ae:90:bf:b8:76:19:
e9:f8:e9:95:e1:98:12:83:df:0f:0b:c4:c6:b1:14:
67:00:1c:cc:31:26:30:ef:f5:b2:c8:49:06:25:f5:
dc:5d:34:2a:d7:31:1f:65:ee:e0:fa:ca:eb:b1:28:
ec:db:eb:5f:b7:a5:f8:a7:cf:63:67:f2:70:0d:f2:
a8:1e:1e:90:82:2d:41:0f:70:13:30:67:f2:f9:12:
3d:1a:09:40:6f:12:0c:41:57:c9:97:1a:dc:30:7b:
3c:c3:40:55:41:fc:05:d0:de:09:34:3c:29:a1:90:
90:01:f4:d6:4a:b9:e5:d9:91:3f:c6:3a:7b:6b:21:
3d:61:a2:99:c6:32:69:be:e6:39:7b:3d:2f:e1:04:
dd:2b:a0:49:3c:45:71:ea:05:d6:ef:19:7f:4f:37:
99:ec:59:62:17:4f:66:8f:7d:fa:33:05:f4:95:17:
d6:4a:e8:61:96:bc:9d:93:95:cb:cc:5a:d3:1c:36:
84:61:8a:33:e1:8e:fd:b1:5a:df:9e:73:55:db:26:
96:70:11:5e:21:c7:88:df:d5:1d:04:8d:c2:35:c5:
2b:60:70:90:c0:19:02:0a:7f:5a:2e:f5:28:6d:83:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:47:99:FF:5C:45:D9:FA:CE:50:3A:83:3E:B8:C3:07:03:6C:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:74:32:de:d7:c3:94:0f:b8:97:3a:ea:9c:16:ab:43:08:ea:
c4:74:94:7a:ff:85:5c:3d:5b:e4:38:d5:e1:33:ec:38:39:fb:
c9:7f:9d:1c:83:91:8a:46:1e:81:f4:de:7f:95:fe:c2:7d:5c:
a4:e4:1d:cd:cc:d6:d5:28:ce:56:13:7d:d4:08:de:85:e6:6c:
0d:7e:f6:31:5e:22:7a:bf:cc:e2:33:23:08:d2:f3:21:04:d2:
a4:38:6b:e9:bb:de:85:6f:44:cb:75:43:c2:76:5b:6e:1f:d0:
88:4f:13:ed:14:fe:9e:02:5e:8d:23:f2:d5:2a:07:7d:be:8e:
08:9a:e5:18:9a:97:59:0f:37:a2:e9:26:c2:e5:ae:f5:33:b8:
b5:c8:38:50:63:56:0a:7d:fa:76:09:41:cb:d1:6b:ca:e0:66:
f1:c0:61:58:d3:f2:ed:c3:8e:fd:e8:3e:bb:3e:16:a9:7f:73:
da:ee:aa:2a:fa:11:5b:d3:24:a5:71:c3:e3:9d:db:85:db:2e:
4f:36:3f:1b:a5:47:f1:38:db:9f:b6:ef:9b:e1:e7:fd:86:b1:
9a:fe:41:83:eb:eb:fc:cc:de:7a:19:de:69:ce:64:75:62:e1:
a8:de:81:9f:56:ba:22:cf:73:1b:20:d1:87:fb:0e:e2:be:a2:
60:a8:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:51:18 2025 by rpki-client