Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa
File: b070f9e8-2be6-3915-acc7-509b56ce39ec.roa (raw, json)
Hash identifier: rFZcbAo8srGOqsQmCzJjRvkYJvalS7hg26+zCG7UF7s=
Subject key identifier: 2A:A4:72:7D:69:90:F0:50:84:41:34:BB:95:25:FF:48:35:55:16:3D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A353236F3E62574A85C40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 71.30.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:35:32:36:f3:e6:25:74:a8:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=dda1b48d-deab-4cdb-b95d-d13f49190076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:79:6b:6b:77:73:a0:44:7b:1d:23:a9:58:
e2:52:88:ea:8f:7c:73:f7:58:e1:b1:01:f8:45:0d:
e3:b1:a6:56:95:e7:d7:76:70:3f:e4:be:4c:bf:ec:
d5:75:23:4f:95:50:13:18:f7:62:aa:0b:35:dc:32:
a8:93:cd:67:3e:ff:4f:c1:7b:43:04:db:06:0c:f8:
68:bd:58:88:b3:3f:d0:3c:8c:d2:2f:10:8b:2b:a4:
0b:14:82:0e:b1:e4:46:62:84:ba:89:16:55:11:6c:
49:e2:ba:30:bb:fb:53:c7:38:20:02:5a:18:6a:04:
03:e7:f9:4d:60:6c:69:83:98:cb:bc:13:90:f7:84:
b9:0f:f5:cc:1f:61:f8:ac:04:aa:f2:2c:08:9a:7a:
8c:ba:5c:8e:93:29:5f:10:e8:39:16:72:e6:e1:49:
08:e7:3c:b1:d8:03:da:e5:7d:6a:27:f7:6b:6a:ab:
35:d3:48:e5:6e:0f:73:18:cf:c7:84:bd:ef:c3:d1:
85:c2:29:96:6c:a9:53:30:1d:40:03:1e:e8:66:e1:
51:8f:38:ce:db:8b:08:3e:9b:83:f5:fb:ea:63:e3:
a5:5c:1e:e3:77:df:0c:0e:a6:3e:48:4e:6f:d7:b5:
db:e9:54:87:55:84:ce:8e:7b:a3:0b:8a:56:b0:5e:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:72:7D:69:90:F0:50:84:41:34:BB:95:25:FF:48:35:55:16:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:40:f6:da:5e:cb:6d:75:61:bc:6b:07:6d:66:18:44:a8:8a:
92:ce:e3:ba:be:50:ff:a0:82:4e:1b:b5:f7:0f:02:84:38:5a:
96:77:66:1e:eb:85:e5:d1:fc:55:3c:fa:db:f0:01:6a:dd:51:
69:14:07:49:0f:80:03:b2:2b:64:33:b7:79:11:5e:24:17:93:
bc:d0:2a:95:92:e4:91:0f:b1:92:d6:b4:af:a6:ee:3a:84:22:
63:58:73:a8:a7:ed:61:27:1a:87:49:6a:d0:71:c0:c4:d0:40:
c8:16:c3:b4:73:5d:f6:5b:d0:f8:70:c7:b8:2f:7e:36:02:38:
92:d9:9e:43:1a:ed:a1:7e:3f:3e:15:ce:af:d1:c4:77:5a:f6:
72:ff:1c:f3:e0:aa:88:54:df:00:f7:05:87:a4:af:03:53:a8:
ce:b2:30:8e:fc:23:53:4f:f1:37:97:68:7c:1b:a6:bb:2d:e3:
3c:96:93:89:39:c2:68:ee:3a:92:0a:f9:a7:b3:1e:69:c7:88:
f9:34:c2:05:f7:ae:c6:d8:f4:2a:bb:55:6d:4e:11:a5:10:fa:
d8:bb:e1:7d:2f:ae:9d:96:13:fa:a4:6d:dd:45:1b:26:42:d2:
38:4a:ae:97:25:ce:35:af:0b:52:08:79:9d:45:a6:38:b9:6e:
90:d6:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:19:37 2025 by rpki-client