Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa
File: a51ada71-9eee-3f42-a21d-fceb50af00ed.roa (raw, json)
Hash identifier: K8hdkm3V9jP/yqANFh/Gk40cHmhNqa75cN0k5kHKinM=
Subject key identifier: E1:BF:57:FF:71:78:1C:A1:DB:24:AD:45:74:CF:BE:09:AA:A8:6A:4B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553BE6784B8E91FAAD0380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 209.218.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:3b:e6:78:4b:8e:91:fa:ad:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=3a4406e0-60c4-4c18-8b5e-4203037b8380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:54:3a:ff:75:82:0f:53:d2:f0:1d:0a:0b:
06:1c:f5:c3:44:d8:25:10:a4:51:98:6e:f9:e2:47:
81:11:91:9a:17:a8:12:e1:1f:e0:e0:3c:03:0b:53:
3c:33:cd:b0:42:8a:3e:25:84:9d:c3:50:3b:e7:65:
71:76:68:9d:30:68:64:bc:aa:b7:07:88:fe:de:de:
a2:98:82:f9:4b:66:ac:dc:db:c2:e4:d3:ea:4c:10:
0e:6e:a6:54:69:d0:2e:e9:14:b0:2b:70:6c:8b:36:
7e:79:ce:d2:e6:07:0c:a2:17:b0:9c:64:14:6a:0b:
90:85:58:47:58:61:6f:f9:f0:56:26:8e:42:24:23:
7e:41:7d:a5:c4:11:a9:44:76:2c:74:e4:85:49:b0:
17:e0:7d:3a:13:19:df:3c:63:1f:40:be:e9:ef:8e:
9c:96:08:d3:be:00:30:30:db:33:c6:8f:2c:5f:30:
c3:f1:59:61:f1:ac:4d:c4:7c:13:55:14:f6:82:0b:
a6:51:bd:31:3a:6d:01:c8:85:ac:8e:b4:26:65:ab:
ba:b9:a1:80:ca:89:8c:9c:49:a1:36:b3:ea:71:41:
1e:90:7b:3b:92:b7:00:a7:74:3e:9b:c6:01:5b:76:
17:45:13:5d:9e:a1:34:92:46:f1:2c:e7:ac:3a:f2:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:57:FF:71:78:1C:A1:DB:24:AD:45:74:CF:BE:09:AA:A8:6A:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.218.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:d3:a5:4b:f0:44:f3:44:d2:34:55:23:b3:8e:4f:9a:1f:52:
f3:c2:54:0c:f3:50:17:ab:50:68:c1:6e:42:dc:de:27:09:93:
51:79:5e:93:f8:39:4e:59:90:27:bd:05:bb:c1:9d:3a:94:e0:
98:49:34:36:d5:ef:6d:fb:5f:19:c8:33:33:6c:ea:23:43:87:
ca:52:7d:00:2c:aa:22:45:d4:11:d7:91:63:70:00:1a:5c:95:
04:db:c9:cc:7b:f4:5e:d6:93:18:b0:f4:01:02:5a:58:22:1b:
23:48:7f:97:2e:f1:41:40:23:1e:e4:44:6d:36:a4:79:1a:54:
fd:45:92:c8:aa:2c:59:17:23:9a:53:4a:35:a8:09:74:ae:c5:
e4:ca:59:35:ca:dc:5c:8b:f6:70:60:e2:2f:2b:fc:2b:66:08:
4b:c2:69:05:fc:83:2d:f7:24:55:84:59:26:e9:1c:4c:86:29:
98:e7:b4:58:92:a2:7e:26:fb:80:87:ae:a4:27:38:41:50:6f:
d5:eb:a6:6e:88:f9:9e:f7:cb:2b:7b:31:d4:ad:e9:3d:30:9c:
b1:f5:ac:1c:ca:3f:4e:2d:8a:04:7f:48:14:c3:92:6e:c7:85:
e1:4c:c2:d7:8d:1f:c7:e7:26:40:a7:cb:e3:63:10:74:02:64:
f0:30:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:13 2025 by rpki-client