Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa
File: aca75f1b-5e63-368c-910b-d08a89644fb3.roa (raw, json)
Hash identifier: 8LOl4hPfZba1agtcG40sf1dIHG2R5osq0iWb/zTJpL0=
Subject key identifier: 68:71:7A:84:52:AD:72:BA:47:7C:B2:F5:88:31:5B:ED:09:D7:9C:0F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847FB1A2DEAAEA36DEB1381E4C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 7029
IP address blocks: 71.29.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2d:ea:ae:a3:6d:eb:13:81:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=ca9aa840-228a-4985-afa0-602bba3d398c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:15:a1:bd:c0:85:e0:c4:ea:67:82:61:b2:
25:cd:30:d3:72:eb:64:50:2b:69:1e:19:bf:31:39:
de:2d:75:98:f3:d5:73:c3:00:f0:0a:1e:4a:2a:26:
e1:85:85:35:29:6f:40:9b:ae:a8:cc:71:8e:8e:c4:
18:65:fe:67:a7:55:de:22:45:e9:b8:29:b0:16:d5:
0e:d2:ea:cf:33:6f:e0:e0:82:e7:93:0d:39:63:6e:
2b:25:96:bb:5f:4e:e8:ba:82:77:f6:21:3f:12:11:
af:13:e8:49:a0:83:40:ba:94:8c:ff:29:a4:f9:12:
a8:3c:1d:69:61:80:52:27:a1:45:d4:d0:f0:8e:4b:
76:e4:31:69:25:43:fa:de:8c:48:cb:fe:80:43:0e:
c4:92:40:63:7f:35:93:90:53:af:6d:81:90:4e:5c:
e0:00:cb:8f:75:2e:62:22:6c:4b:99:01:bb:32:3e:
bc:12:ed:a2:1c:e1:fd:40:8d:72:a6:d7:3f:94:8a:
13:d5:56:6d:2d:6c:d5:1e:38:7b:b4:f3:1a:11:93:
f9:8c:13:5f:1a:9a:ab:67:e1:e5:23:1d:b0:00:4c:
9d:0f:a5:07:2e:0f:f4:4e:79:9f:2c:05:21:b6:f7:
96:9d:ee:d1:98:5a:98:89:01:6e:82:54:4a:91:67:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:7A:84:52:AD:72:BA:47:7C:B2:F5:88:31:5B:ED:09:D7:9C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:8f:ea:95:f5:e6:cc:61:ee:55:ce:49:0d:b3:b8:f8:17:6f:
19:bb:16:ef:7a:55:e7:21:6b:f8:a6:6e:22:89:c4:63:5d:1a:
37:1f:9a:30:e0:7f:9e:82:50:25:11:18:5b:ed:bd:21:8f:83:
77:08:82:41:91:84:54:03:04:e7:12:91:af:9f:e8:a4:a1:2c:
5c:47:eb:2c:ed:90:5c:72:33:5d:19:03:e0:85:ca:01:e6:c2:
d0:a5:6b:b3:67:80:2c:43:d7:c1:e2:30:72:49:88:70:e8:fd:
42:6d:c0:d7:a9:94:43:77:ce:bc:f2:7c:42:2a:3a:29:5c:11:
88:4d:18:95:23:38:c3:4a:4d:50:d1:aa:50:ad:a4:00:9f:60:
dc:bb:80:69:9e:2b:db:65:2e:ca:fe:d0:97:aa:b1:4e:a0:2a:
f6:be:c8:8d:f3:04:f3:ca:ac:5a:5c:e5:49:6e:74:60:33:9b:
5c:28:e6:a2:34:d0:5f:01:79:28:99:58:ef:bb:e4:8a:06:b5:
33:57:e3:09:7e:3d:36:d4:c7:0e:31:c8:d4:ee:dc:db:91:81:
3c:48:de:87:72:63:9a:8b:21:a3:e3:8d:cf:3b:ed:59:5a:08:
b9:ae:2e:b4:4e:5b:f4:20:9c:7d:14:23:d1:00:33:0c:91:fc:
25:ac:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:42 2025 by rpki-client