Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa
File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json)
Hash identifier: i2UHgfWRoIFWA30nbG/xsA9yMJc+i+ml8zw884d1luU=
Subject key identifier: 89:C0:CE:A2:11:61:9A:7A:94:1F:F5:EC:D2:B3:E8:FF:39:E7:AB:64
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847FB1A2AA86B069A414F870700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 7029
IP address blocks: 72.172.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2a:a8:6b:06:9a:41:4f:87:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=a042e0ee-792d-4633-8b81-5c6005e42809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:af:92:a4:3f:b7:fe:47:ac:fd:40:b1:20:
e1:b3:7d:a1:9f:56:c3:3b:eb:4b:9e:4c:4a:10:49:
b2:93:3e:9c:c2:5c:08:e3:0f:38:3c:bc:e3:4b:7f:
57:ad:24:8d:8c:26:7b:8e:ff:6b:60:c4:0e:38:de:
53:cb:80:b5:79:1c:97:3e:22:2e:d2:11:a5:33:8a:
20:03:0b:9a:1b:9d:88:14:dd:bf:7e:d4:03:0e:df:
db:2d:72:9f:9b:6f:d8:94:b0:17:db:9d:ff:8d:4f:
ca:c3:fd:46:e1:ec:8f:da:70:04:94:e6:2f:0f:7c:
56:ef:00:e5:72:22:11:35:22:59:ff:ba:2f:29:52:
08:e1:2c:b1:cd:f9:0d:9b:09:b0:3f:16:55:5d:4b:
73:5f:e0:3c:e9:88:28:8f:33:0c:ce:0d:9a:5e:71:
c4:4a:39:69:b6:45:65:13:9e:57:45:e2:9b:e4:43:
90:1f:b1:ff:1f:af:7b:2b:06:e7:48:58:30:5d:8d:
64:08:d9:9e:d1:14:c7:b5:a2:01:a5:07:fc:26:fa:
79:9c:ad:2b:19:92:6f:c7:d7:c4:1e:9b:ba:7d:70:
bd:e1:d3:66:ac:2f:0b:84:b8:0c:62:ca:05:9e:d8:
18:cd:3e:c3:66:eb:4e:b2:98:6f:1c:75:8e:5a:d5:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C0:CE:A2:11:61:9A:7A:94:1F:F5:EC:D2:B3:E8:FF:39:E7:AB:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:de:b6:26:ac:21:9b:a5:f1:4b:65:6b:c4:1f:fb:23:e3:fe:
d5:fe:95:3a:a8:8c:1a:eb:e8:7c:2a:f1:bb:db:88:c4:bb:a3:
d4:bb:f1:7d:31:a0:2d:b8:79:96:8f:82:8c:d1:68:ae:b5:88:
56:73:48:3c:e5:ff:f6:da:ef:bf:6d:e7:b2:cc:83:d0:78:e5:
8d:5e:19:38:9b:e1:64:35:97:8c:39:26:c4:f8:7f:3c:75:9e:
97:3b:6f:84:06:a9:73:e5:15:80:b6:c7:30:27:5a:a0:2e:fb:
7e:58:30:3d:3e:c7:8c:ce:e7:b3:c1:8f:48:04:41:e6:a7:d1:
68:4d:f4:cd:f3:af:10:aa:a6:11:82:7b:38:35:e9:1e:43:4e:
d5:d3:ab:be:c8:58:6d:0d:59:93:ed:53:58:d6:cc:b3:68:e4:
ba:18:c5:fb:fa:9d:31:d7:66:0c:82:cb:bf:16:38:81:5d:14:
89:3a:74:2b:e1:29:7c:55:bc:c2:94:3e:94:74:a4:1c:39:82:
cd:09:74:fb:64:cf:71:94:11:a6:bd:23:97:d1:b2:52:e2:44:
d7:fc:2c:f0:d6:e5:17:14:1c:dc:90:75:62:85:ba:b6:83:50:
d2:0b:e5:4b:66:c4:bc:df:ac:cc:62:37:54:bd:01:32:42:9a:
a9:20:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:17 2025 by rpki-client