Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa
File: 95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa (raw, json)
Hash identifier: qZAtjwrFYvOH37A4MTWWDdwQpLnEfu9Px3j8aZE4Pj0=
Subject key identifier: 72:3A:DC:06:47:77:04:0A:1C:1D:20:74:CE:7B:DE:73:A0:7F:01:7C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B5B262A591179CF13240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 151.213.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b5:b2:62:a5:91:17:9c:f1:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=8b000b51-da43-49eb-a219-0579325e789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:55:cc:f2:b0:53:bb:3e:18:02:af:3e:e2:
83:c5:db:cf:7e:94:6c:59:55:20:53:d1:74:02:06:
39:b9:d0:35:61:b4:d6:88:6e:a2:bd:e9:e7:1e:13:
b4:52:53:ba:bb:58:75:c8:36:a2:64:f2:f6:fa:90:
72:ee:fd:9b:55:8d:23:e1:67:b1:66:b0:10:59:ba:
44:d6:12:c4:20:fc:76:87:2f:09:b0:24:5f:c9:d8:
4b:23:5e:2c:f2:20:0a:69:f8:8c:22:11:87:18:01:
40:1f:15:95:7a:d4:2c:bc:e7:6b:3e:45:9d:19:bd:
24:09:6c:50:0e:e8:72:5f:e4:2b:24:ee:63:25:60:
25:a5:2c:42:73:3d:63:a7:ac:38:35:bc:74:ae:e5:
aa:13:0a:3a:1a:98:53:d7:72:4b:7f:cb:2a:d6:a3:
3d:48:fd:08:44:b0:07:54:8c:22:eb:8e:72:0b:9d:
64:4c:62:52:cd:46:44:3f:e3:34:80:3d:3c:1c:af:
bb:05:13:0e:0e:8c:3c:91:1d:e2:db:05:ea:2a:85:
d2:e7:d6:68:36:a5:a1:6a:28:8d:db:5d:dd:17:13:
53:1c:63:eb:0e:ad:c9:2d:ec:4f:d0:c3:4e:00:ab:
c1:e9:76:d0:5c:2a:d2:83:50:c6:f3:fd:6d:f8:b5:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:DC:06:47:77:04:0A:1C:1D:20:74:CE:7B:DE:73:A0:7F:01:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:65:b4:7a:09:88:5f:f6:39:f9:67:7d:16:e9:cc:aa:8c:11:
6b:f5:0e:d1:c2:f5:e1:f6:2d:5e:af:da:5f:07:77:21:0e:da:
ec:14:02:8f:6a:83:aa:21:3c:67:65:b6:c4:25:d9:f9:c8:9b:
52:b0:f3:72:d6:42:1b:aa:64:43:0d:0b:72:d5:b5:41:9c:39:
64:c9:f2:8f:2e:0a:29:e7:d1:6e:42:90:f7:14:40:71:75:58:
8e:db:27:94:82:4c:64:71:04:f1:2b:47:c4:41:61:69:4d:d6:
8c:2a:ec:12:b1:ec:41:27:df:56:a6:f8:72:0b:f6:bc:99:63:
43:8f:d9:9e:8e:24:d7:1b:89:be:3c:73:5b:c0:cf:31:74:d3:
d7:9f:cb:8a:6a:a9:de:01:95:53:4d:12:01:b9:55:c6:c8:0a:
f1:d0:17:66:a9:f4:2d:6f:8f:2e:8b:40:0f:8e:92:ab:c4:44:
74:ff:94:b5:59:f9:74:44:6a:0c:4c:32:2e:a7:0d:1c:50:09:
8c:27:95:a7:b7:16:6c:11:3f:06:cf:c8:ef:27:87:16:26:e1:
e0:b7:82:91:60:2a:ae:7d:ad:ec:20:ab:81:6b:65:fc:2b:4e:
ac:45:e1:78:18:b2:89:60:c7:1e:5e:8c:48:96:7c:5f:a2:7d:
c7:55:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:02:19 2025 by rpki-client