Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa
File: 9318fe24-60e4-3b51-8fce-61b094e34012.roa (raw, json)
Hash identifier: Vs7yLNMNmtwFZIJu9Aj9ZXL6zx9x8GqncCW6pb+ix/Y=
Subject key identifier: 10:60:77:E0:6D:4E:AC:DB:87:1E:56:1C:B3:41:40:73:F3:60:22:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30CF6F00C42ED82C93CD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa
Signing time: Tue 21 Jan 2025 20:38:46 +0000
ROA not before: Tue 21 Jan 2025 20:38:46 +0000
ROA not after: Mon 21 Apr 2025 19:38:46 +0000
asID: 7029
IP address blocks: 208.101.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:cf:6f:00:c4:2e:d8:2c:93:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:46 2025 GMT
Not After : Apr 21 19:38:46 2025 GMT
Subject: CN=133bd37a-47f9-4de9-8b68-b1a468ec7688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:b8:9a:f2:50:b4:87:1b:9a:04:35:58:68:
32:ca:a2:f2:df:18:1b:29:16:f2:32:53:33:4e:6a:
87:22:63:c1:f3:db:24:0c:40:74:c7:d9:98:19:fb:
3a:03:5e:7c:af:fc:fd:68:c1:f5:e0:d0:01:91:aa:
6e:7d:14:11:9e:48:8a:67:be:df:70:fe:b9:3a:aa:
a0:b2:64:4c:77:e5:23:14:1c:e1:c2:5e:bf:4b:d5:
25:b4:cd:d9:3a:46:eb:2c:6d:8f:b1:96:e1:bf:eb:
a4:02:31:ae:af:97:e0:48:5b:a2:bd:45:7d:f1:b0:
a2:c9:ca:e8:c3:7a:a4:1c:71:19:e3:2b:da:72:c3:
6a:8b:d2:9a:09:fd:79:fa:bf:bb:5b:c5:d9:31:1e:
ba:7b:4d:a5:45:03:3f:4a:33:cd:11:8d:97:92:79:
da:2b:d1:92:76:e5:dc:c4:25:9e:98:53:62:0c:40:
22:e3:9a:af:ac:df:28:c4:c1:b2:e4:41:24:7d:84:
7b:d9:ed:c0:e5:ce:a6:d4:0d:ee:17:cd:19:d2:6a:
85:28:08:c5:df:cc:19:4d:11:66:00:58:b1:15:a0:
64:88:36:9d:57:79:4f:e2:df:0c:65:0d:7f:f5:38:
45:22:d1:77:5f:72:ed:17:bb:3e:0b:f6:80:7f:c0:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:77:E0:6D:4E:AC:DB:87:1E:56:1C:B3:41:40:73:F3:60:22:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.101.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:aa:3b:e1:f9:dd:18:8b:d3:3c:5c:6e:f7:77:aa:a7:cd:1d:
96:7d:10:3e:69:76:0f:b2:02:10:25:e6:e5:27:ec:01:be:9e:
f4:3b:b3:dc:aa:d2:98:7a:c1:70:85:71:16:76:2a:5b:a3:6a:
6b:2d:5f:89:95:57:4f:a8:43:91:b2:29:8e:20:5d:bd:f1:7a:
3f:7a:5f:81:cf:3b:c5:60:de:20:c0:d8:f7:f6:cc:1f:b9:ed:
9b:b9:48:e5:5c:82:41:99:ed:4b:d1:19:00:4c:d3:56:24:b0:
f6:48:73:8b:15:cc:4f:e6:d1:c2:da:7e:e6:57:c4:40:4e:46:
0d:dd:2e:7b:a6:ba:7a:7f:51:72:f8:82:38:1f:8a:1a:07:7e:
2c:f7:f5:53:ca:65:29:25:bf:39:b4:00:1f:e2:b1:08:c4:51:
df:95:d0:b8:18:da:e3:e2:16:72:58:d5:26:65:6b:12:d5:7e:
3b:16:3f:9f:b3:70:71:96:c6:18:e5:91:a5:52:8d:2e:5e:f7:
e1:1d:cb:25:51:a7:54:39:16:b0:e8:2f:21:2d:7c:ff:8a:69:
ed:70:ff:2f:4c:84:4b:5d:a6:07:a2:fc:2b:8b:da:a1:64:07:
52:a0:2e:5a:14:cc:47:8d:94:84:0e:88:b9:e4:8c:31:85:ae:
ba:3f:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:41 2025 by rpki-client