Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f8a07d-340e-3bbe-9587-f51fe550946a.roa
File: a6f8a07d-340e-3bbe-9587-f51fe550946a.roa (raw, json)
Hash identifier: iGKZsWVAM8rzbvIVxVm/FoIpTrZpm3Zqi/bZ2mHiHu8=
Subject key identifier: 66:D4:BF:FA:04:AF:77:2C:C3:B0:F5:6F:24:E1:B2:3E:29:56:20:CD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FBA9A3AC6D0628E66B340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f8a07d-340e-3bbe-9587-f51fe550946a.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 173.189.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:ba:9a:3a:c6:d0:62:8e:66:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=75f0addd-5a39-4029-a1a6-2ba43cac3a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:72:a1:2f:92:47:e9:50:ab:70:58:69:59:
ac:5b:05:58:bf:d8:e9:99:bb:21:9d:29:e8:6e:7f:
2c:ae:2d:83:49:f6:88:c1:b1:ee:cf:48:48:e8:2b:
29:12:8a:b1:d7:21:20:19:7a:38:5b:80:d0:4d:be:
f7:d2:2d:4e:60:48:b9:60:90:f2:93:7d:df:f6:33:
c3:b7:da:2a:fc:a7:1c:85:a1:70:6c:39:ed:bd:e8:
90:ec:33:87:9f:55:55:45:92:67:40:ca:23:44:fb:
0c:89:0a:98:6d:78:e6:c3:0c:68:58:94:af:74:f8:
dd:31:03:a2:c2:dc:22:33:bd:88:a1:ed:b8:a7:7c:
e0:a6:87:23:38:c1:5d:8c:fd:cc:4b:96:6e:c4:3c:
ce:75:77:3b:77:a5:52:f6:29:a0:0e:8d:ef:50:92:
ca:61:ef:bf:63:39:34:0f:b5:73:d8:a8:4f:d2:54:
c7:5b:ca:67:34:df:35:47:d7:21:6a:2a:93:ab:04:
c8:0b:a1:c3:de:ef:ad:a0:76:fa:9b:bd:27:50:03:
b8:18:8b:02:52:f3:8e:3c:9a:be:36:85:95:4c:1a:
5d:62:e7:8f:e9:6c:18:ef:e8:9f:35:9f:8d:a4:5c:
80:08:00:6e:39:0e:15:d8:e6:4a:24:71:29:9f:fd:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:BF:FA:04:AF:77:2C:C3:B0:F5:6F:24:E1:B2:3E:29:56:20:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f8a07d-340e-3bbe-9587-f51fe550946a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:c7:a6:a6:d1:95:69:3c:92:60:10:98:77:8d:5a:b5:05:14:
45:12:79:f8:ae:ed:68:c4:e2:40:2f:dd:4e:7f:57:d8:c5:38:
4d:67:cf:b1:5d:a8:35:b8:2e:41:7b:98:b9:17:de:f6:c1:33:
16:b3:55:d9:91:03:9a:de:3b:3a:01:4a:f0:5e:a8:f6:eb:b0:
74:57:7d:3f:cd:30:4f:74:98:7d:ad:76:90:c7:84:6a:1e:02:
dd:dd:74:0b:04:10:27:67:00:6e:d9:8d:6d:af:96:48:5b:b7:
05:61:9f:e2:59:97:6e:f7:34:e6:a7:1d:a1:59:2a:22:a0:2a:
a4:1d:22:a9:ce:a3:73:88:9f:44:d1:c6:6f:aa:b4:40:f2:73:
35:d6:b7:e8:2e:be:1f:7c:44:01:cd:1e:d4:86:dd:6c:59:6d:
0e:c1:42:8c:f1:c5:ba:4e:a2:57:cf:72:cd:cf:f8:7e:ad:2b:
af:c9:64:8a:53:7e:e8:17:94:6b:2d:96:e0:93:54:e4:4d:28:
09:fc:53:26:5f:78:70:b1:e9:11:ff:6c:6e:0c:d7:fd:03:25:
1f:88:22:06:6c:16:73:07:50:e6:d4:8c:e1:51:45:71:28:d0:
9d:30:71:c9:2e:be:e3:36:0c:79:dd:e7:6a:92:13:4f:1b:1c:
0e:84:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:51:19 2025 by rpki-client