Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa
File: b7018231-1d12-33c3-91e9-2da426ea822c.roa (raw, json)
Hash identifier: NxLw89kqxihTg+H/wU32U8IHZai7hqcaYdTPSiO6FWc=
Subject key identifier: 4A:CA:8E:CF:79:44:13:F1:D4:AD:13:23:D2:23:38:37:21:A0:E5:84
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848143B2BC0CADFC1B79C64B580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 64.24.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:2b:c0:ca:df:c1:b7:9c:64:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1de5dec1-9bd9-44ad-849f-a9f4b794eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:a4:76:95:81:6c:9c:2a:c2:b8:c4:4e:6f:
8c:b1:4e:5f:5d:0d:52:a8:48:36:d1:72:d6:45:b0:
48:60:df:6f:88:91:aa:b5:c6:12:99:3f:f2:6f:52:
07:76:a9:3b:6c:9d:1f:cf:6a:4d:bf:46:1d:36:b2:
b2:d0:f2:16:0b:48:4d:59:b7:0d:44:e8:13:e9:9e:
1a:0b:fe:a6:60:61:84:79:ed:82:00:e8:fd:00:d3:
a7:03:f0:24:c1:81:25:c9:d1:4c:28:58:f6:03:4c:
a9:4f:08:38:f2:4b:d9:37:3b:22:67:0a:24:79:bf:
06:25:f4:dd:f6:4a:47:6e:40:ab:05:dd:20:bd:f5:
90:83:5b:63:8e:ff:1e:92:84:cc:74:bb:e1:ec:3e:
c3:14:18:33:43:33:04:66:1e:5f:7d:82:c4:6c:f0:
4d:ec:18:5e:6b:78:09:b8:40:f3:ff:45:7f:93:a6:
bb:40:39:0a:94:d8:06:ca:d6:49:4b:6a:b0:1a:c1:
dd:18:ba:22:ff:22:99:a2:f8:c9:3b:7d:e1:fa:6f:
b4:a2:52:c4:d7:eb:f8:d2:4f:dd:47:27:bf:60:22:
e7:e9:f9:e1:76:81:25:4c:cf:3e:a6:fe:a9:4b:f9:
d2:64:e9:65:6a:7a:ab:dc:8a:dc:98:26:47:41:f9:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CA:8E:CF:79:44:13:F1:D4:AD:13:23:D2:23:38:37:21:A0:E5:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.24.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d5:52:28:ec:a8:42:c1:e8:77:e9:95:20:af:3e:70:4a:18:
64:95:26:43:4e:f9:28:bd:fb:28:a9:18:f8:29:18:3e:eb:e9:
b5:1b:34:ac:32:8c:8a:bf:df:c3:b1:e1:f0:2c:dd:b1:ac:8b:
a7:7b:91:95:0c:19:28:eb:6c:07:bd:09:af:d5:f5:c5:87:a0:
6d:bf:75:63:29:cd:17:51:41:c7:13:96:84:36:5a:25:ff:ba:
58:13:4f:e8:ff:d5:a5:26:ac:e2:fb:1f:2b:c8:f0:22:9d:e0:
89:c0:88:7e:51:15:5c:8a:8c:a0:6c:0e:b7:94:ff:6d:18:8b:
3c:a1:7b:ec:01:bd:8c:5b:e8:e7:ba:b1:ee:bd:46:95:9b:87:
65:9d:41:5f:22:0d:3f:a0:48:41:17:28:9e:d5:36:a4:27:a5:
aa:14:1b:85:b9:1a:09:6e:32:f4:5a:29:5e:5c:a1:be:1e:16:
1c:56:ab:d2:57:28:0e:92:64:eb:3c:ec:ac:88:14:8d:df:29:
2d:ec:23:cc:89:5b:3a:e1:ee:2b:27:70:b8:49:a7:8b:2a:63:
43:f4:87:78:0b:fc:b6:a7:48:47:b0:25:8d:c8:26:d8:f7:5d:
21:30:5c:e6:5c:56:90:33:5e:b3:86:82:7b:84:d5:b2:76:e0:
55:bc:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:54 2025 by rpki-client