Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa
File: b87596fa-17c1-38ef-93cf-20e32fc601db.roa (raw, json)
Hash identifier: P9Vv39DkSuJUqUVlOoKidu54jkUsSI8FUhwm6rjn3uc=
Subject key identifier: 90:19:E5:7E:B1:8E:DF:77:92:8B:61:08:F4:8A:EF:AE:1A:FB:E0:CF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155034C166B124F29E9FA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 166.102.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:03:4c:16:6b:12:4f:29:e9:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=82e8c850-c20b-4699-a1f0-6836a6ddfd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:2f:42:86:71:2a:fe:01:44:17:c7:7f:d4:
c8:04:bd:13:b4:21:d7:a6:f3:eb:61:0c:1f:a4:c3:
85:53:e9:95:c3:c4:18:e0:70:44:ee:2d:11:06:25:
1e:de:8c:0b:ac:cd:58:0a:1b:58:f0:eb:19:3a:56:
2d:ed:da:cb:57:71:ef:44:a2:08:80:41:3b:88:38:
b0:f7:90:03:7d:50:87:22:2f:c3:55:3b:ce:ed:9b:
3e:bd:3f:e4:41:69:1f:ab:3b:32:42:a6:b4:cd:1e:
0e:b4:fb:96:57:a8:ce:d0:aa:a9:b2:36:ba:50:be:
23:c0:7b:b7:06:db:2d:66:2d:e7:07:8b:f5:e9:0f:
1f:bf:8c:fe:2b:ef:de:c6:64:e3:d9:64:fe:cb:82:
5e:55:b0:39:ee:ad:3f:e1:2b:92:e2:8f:5f:05:4d:
3b:a3:44:ac:a4:95:69:25:2b:37:b6:19:e0:87:ea:
5e:d5:ea:57:e8:32:93:93:0d:b2:32:cc:fa:36:e9:
49:6f:0c:cd:ef:7e:25:a7:31:55:9e:b8:cc:25:73:
a8:21:cb:45:bd:a7:d0:54:23:2c:44:65:20:fb:a0:
56:80:a3:99:07:90:10:a2:fa:25:4f:1f:fc:57:9d:
44:9c:ab:a0:6d:7d:70:b0:92:54:20:5c:46:b4:ee:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:E5:7E:B1:8E:DF:77:92:8B:61:08:F4:8A:EF:AE:1A:FB:E0:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
166.102.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9f:37:ea:e6:e7:8f:6e:56:e0:3b:45:b9:b0:21:82:75:4a:
1d:cd:40:9a:17:f5:ed:dd:86:02:d2:b5:1c:d5:56:f6:0f:19:
f6:f8:d2:9a:57:fa:74:ed:88:a2:0b:d8:70:52:59:98:19:7d:
51:6a:fa:15:a5:c8:1b:82:7d:69:90:77:8d:ef:af:e9:7a:65:
7a:d6:d0:81:43:58:78:a6:94:ec:b0:67:77:31:d4:8e:92:fc:
bd:5b:f1:88:55:bd:89:da:7d:63:a7:16:0d:f3:ca:39:60:68:
81:f8:5c:69:09:b0:12:1d:3a:d7:2f:83:9d:0d:47:35:52:c2:
65:c9:aa:1f:9d:5b:e8:a4:b4:b2:a8:4f:77:83:cb:60:ab:bb:
38:60:f0:cc:f9:22:39:2e:17:bd:a1:3c:89:24:ba:ec:20:ce:
3a:7f:e2:74:bb:fc:54:b3:5b:0d:83:14:9d:c9:dc:50:8c:ff:
91:9f:26:ff:e6:27:0f:ba:56:60:29:04:0a:9c:f2:b2:d2:60:
63:6a:2f:47:11:a3:4f:1c:ee:7c:f3:ef:4a:49:64:b5:4e:4b:
8d:c8:11:c5:22:66:6a:38:bf:87:d9:5d:e3:5d:d6:2a:09:28:
99:6c:e0:89:da:50:14:64:04:d9:5d:7c:d3:4a:38:14:a3:b1:
1b:a4:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:55:32 2025 by rpki-client