Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa
File: 9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa (raw, json)
Hash identifier: FMT3w6ihoGzapAb4fXrvkQl8Yk7xZDCVLPmA5qJK0D8=
Subject key identifier: C1:35:BF:71:E6:E6:33:54:4F:C7:C7:9F:BA:DE:FC:15:82:17:95:37
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FB9E2FF1B134A3B5D5A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 173.186.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:b9:e2:ff:1b:13:4a:3b:5d:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=1e2fd45e-153e-450c-a3bb-5f0b9f682906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:75:43:97:5d:15:6a:2d:2c:df:02:3e:ac:
db:46:83:30:86:ba:4e:95:42:46:39:08:c2:88:d1:
01:06:a9:43:3a:b4:7c:ca:79:8d:02:7c:a2:c0:6e:
26:c1:3b:6b:8e:e3:66:1b:74:93:b4:ef:63:a9:e9:
b3:d4:b8:fe:bc:8e:6b:3a:78:84:57:39:aa:e7:31:
b9:36:8a:ba:bc:fa:9c:3d:db:0f:f2:48:10:99:6c:
e5:eb:95:40:b3:88:e0:ac:47:27:b6:34:b1:f0:71:
e9:b1:84:04:54:00:57:a8:91:11:c3:46:2b:03:66:
3d:16:9d:b9:c0:30:37:6d:c1:91:a7:9a:ad:aa:a2:
cf:28:74:5e:d1:15:5f:04:24:e7:d9:33:03:27:6e:
07:c5:22:8d:56:7a:fe:1f:2c:fc:11:4e:ae:38:c1:
fb:ce:ae:0e:ff:67:ee:13:c1:ae:3f:cb:ee:f2:dc:
c2:7e:55:63:6f:12:2b:43:28:cc:3c:de:4d:0b:4d:
aa:6d:ab:a6:eb:05:f1:a8:0d:d8:f0:93:c2:fb:ab:
28:16:0f:03:62:ff:a8:2e:b4:9d:9b:2a:8d:87:d3:
56:e3:38:94:13:31:87:7b:a3:e3:0a:b3:1a:b7:1d:
40:28:3b:7f:57:b8:f0:13:87:6d:bf:89:f2:79:e3:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:35:BF:71:E6:E6:33:54:4F:C7:C7:9F:BA:DE:FC:15:82:17:95:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:8b:49:5c:6b:f0:5e:73:f4:6b:26:2f:51:9d:c3:78:ab:56:
c9:e6:cc:b7:4c:e7:2a:af:62:47:b3:8e:79:33:12:68:ad:27:
59:b1:16:04:cc:7c:38:a1:c4:3a:e5:d1:23:9f:24:00:73:9f:
04:89:88:e6:d5:86:a6:e9:04:c1:05:74:97:84:41:5a:68:45:
2d:1e:d5:e2:27:e0:ed:f5:19:e3:ef:83:6e:0c:7a:c6:74:e2:
9e:15:b9:23:de:62:93:56:1b:cc:93:30:92:c4:96:1c:bf:2f:
4d:a3:cd:b1:5e:a1:a3:5c:52:2c:ea:95:6d:b7:b3:fe:10:f5:
98:87:23:3c:96:8b:4f:26:d1:91:6b:84:66:0e:4e:8c:6d:7b:
0c:11:e7:d3:cc:2a:3f:60:4e:5b:27:a7:6f:1b:d1:e1:99:be:
7b:48:90:41:d2:48:2e:1c:3b:59:f6:af:63:b1:e5:6d:f3:88:
3a:eb:0c:b4:5d:4f:eb:a7:f1:5f:c3:a2:42:c3:3c:3d:24:40:
15:ac:cb:68:03:5c:5f:c5:b0:c0:32:91:17:a9:9f:46:ed:92:
3f:59:f8:dc:30:e3:ae:fd:9c:0c:b6:73:fd:c3:76:ef:d3:ef:
07:55:8f:8e:5a:92:8d:fc:16:e4:f4:a2:79:b8:6a:af:9b:75:
da:37:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:09:53 2025 by rpki-client