Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa
File: a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa (raw, json)
Hash identifier: tbfUQ7HufFzrxjac5G9iXSBTQsRuTvKltOgqOQtbyS4=
Subject key identifier: 0F:70:A4:78:B7:38:AA:D2:8E:47:4B:BF:C5:86:56:C5:BC:11:D2:14
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A37C5F58939B5D447F080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 173.187.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:37:c5:f5:89:39:b5:d4:47:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=ee136dd5-2722-4504-ad3a-fe1694f668bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:78:27:28:1e:83:ba:71:8c:a9:49:4e:c2:
9e:c4:9b:23:88:c6:f6:1a:63:da:30:25:45:a6:c1:
90:9f:bd:64:19:10:c0:39:c9:7a:39:18:b3:dc:b2:
f4:d1:12:2f:c2:a7:29:a1:72:b5:2c:b4:d9:a6:6d:
75:f1:5e:15:58:55:17:4b:18:e2:4f:94:98:46:f2:
fa:62:83:60:a1:3f:54:11:2b:90:28:72:0b:5f:30:
88:ae:c0:c4:45:f0:09:f7:02:76:ac:9f:12:21:37:
5e:2f:40:4f:eb:f7:70:a4:e1:9e:f0:f6:e5:07:fe:
47:fb:3e:73:ac:63:c5:db:b0:99:a1:13:0d:e8:4f:
36:22:c1:3f:ff:9f:2d:7f:67:85:8b:44:db:48:26:
3d:37:49:4b:8e:c6:1c:e8:73:34:f4:67:2b:4c:04:
75:31:e2:2c:85:7e:9e:07:5d:36:9f:35:cf:3e:16:
34:e9:91:79:ac:13:84:e3:82:e9:f5:14:6f:45:2f:
24:24:f9:80:36:54:eb:57:70:0d:39:91:e8:7c:b5:
f1:7c:37:ed:07:fb:02:90:84:ad:57:41:5a:5c:bf:
73:d8:66:33:20:6f:85:51:c7:2c:42:02:16:1d:97:
bb:ec:2e:f2:54:ec:a0:35:85:70:a1:4e:3e:2e:01:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:A4:78:B7:38:AA:D2:8E:47:4B:BF:C5:86:56:C5:BC:11:D2:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e5:4e:be:5c:c2:c8:3a:a3:13:36:d9:58:ae:d4:07:eb:05:
4e:47:f1:72:df:3d:af:dc:86:31:e9:c0:d5:a5:be:0e:26:1a:
c6:7a:a9:20:fa:80:d8:4f:fc:e2:3a:f1:26:44:23:a2:45:56:
0e:44:e4:f1:b8:58:b6:85:af:e9:32:0e:79:c6:1e:84:c9:31:
8c:ab:fc:fc:d7:2e:b7:95:1a:b5:98:3c:b8:6a:52:a7:3f:5b:
59:ce:c3:89:36:f6:81:b8:73:84:d8:81:6f:d6:de:cf:05:7f:
04:98:6f:02:05:d7:23:5a:ce:6d:ea:e3:b2:d4:57:a1:52:a9:
18:15:9e:b2:41:4b:df:13:9f:9c:10:9a:d4:3a:80:e4:74:6b:
ba:4e:20:31:02:36:f8:57:79:cb:bd:57:f9:5d:6b:00:07:27:
bf:21:a5:2c:b2:96:c2:ad:1b:fe:ca:88:90:81:b9:61:b2:87:
79:48:a5:ba:72:c1:7e:9f:1f:28:d8:4a:71:5c:91:2e:0c:fb:
09:5b:8f:fe:c5:38:9b:bb:ef:b6:8e:ed:5c:f7:17:31:22:54:
91:0f:ff:f1:cc:b1:09:11:9c:73:db:1f:14:ab:50:87:65:2a:
74:cb:77:c5:0d:80:17:fb:8a:79:9c:2c:3a:4b:14:5d:07:18:
dc:8f:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:43:58 2025 by rpki-client