Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be6c7e88-3d00-3603-ab62-f07704cf7993.roa
File: be6c7e88-3d00-3603-ab62-f07704cf7993.roa (raw, json)
Hash identifier: GJTD9tsUeqSp22PEwQuniufpXiHwOXM/Tyfe6WYewSM=
Subject key identifier: 40:7A:DE:1A:AF:F0:32:3C:1A:C8:B2:1F:D0:ED:0D:19:7B:B9:A2:DB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15506F4D6B248B204675780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be6c7e88-3d00-3603-ab62-f07704cf7993.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 205.147.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:06:f4:d6:b2:48:b2:04:67:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=ae5ac650-ceb2-42a8-9dcd-5cfa3f6fa9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:60:6a:f5:6f:4f:85:cc:66:a5:15:1d:18:
53:80:05:88:43:7f:d3:f4:7e:8c:9a:a3:54:bb:1b:
8d:ae:7f:24:b6:93:ab:5f:b7:80:74:c7:22:d9:29:
13:0d:f6:0b:ee:05:cc:8c:4b:99:de:cb:eb:c2:33:
84:67:0e:f5:fd:2c:9f:f7:98:4f:dc:b1:35:cc:ff:
56:46:30:4e:f2:4f:06:72:8c:71:4e:97:4b:d5:3e:
f4:44:22:fd:a2:cd:1c:3b:8a:6a:24:ce:86:90:d0:
ac:9d:99:a2:5d:8b:70:0a:54:4e:e3:d6:b5:28:64:
ee:b8:0e:70:76:a7:33:5d:55:f6:2f:03:de:0d:71:
4b:44:34:87:27:2e:c9:93:fc:97:d6:d5:26:97:c9:
c5:f7:da:33:f9:19:54:24:32:a1:5b:97:76:a1:98:
b8:e9:58:96:ec:eb:9b:e7:d8:45:23:03:5d:60:ca:
27:18:4c:32:15:be:29:17:97:ef:65:45:d5:fd:bf:
17:d3:36:ba:f5:13:3a:36:86:7e:2e:37:01:53:7c:
b6:73:bc:e3:1f:c3:af:84:45:63:fc:85:34:a5:08:
d5:9f:a2:aa:af:0c:6b:37:e5:5b:45:0c:bd:05:97:
7b:c4:e5:9b:d0:51:2a:14:1a:f7:63:b0:8a:e6:a0:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:DE:1A:AF:F0:32:3C:1A:C8:B2:1F:D0:ED:0D:19:7B:B9:A2:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be6c7e88-3d00-3603-ab62-f07704cf7993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
205.147.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:4a:16:dd:17:59:31:c8:2e:e6:45:44:85:87:76:dd:17:82:
d5:ba:e7:54:b3:d1:ee:77:1a:98:79:53:59:18:52:07:91:f6:
d4:ef:8f:72:7a:a8:c7:1e:36:b7:af:1b:8b:27:02:06:ea:41:
a5:2c:4e:8a:b7:ae:34:69:ae:8e:3c:8b:ed:cf:f8:a1:59:36:
82:ae:30:5c:ea:df:aa:97:0e:e1:32:62:c1:68:3b:9d:25:a7:
07:10:d5:bf:8e:8f:70:4c:dc:d8:8e:71:8b:6c:96:f3:7f:ed:
7a:67:50:a7:bb:54:70:80:0e:b6:ee:20:25:50:02:c0:eb:8a:
2b:95:4f:8c:98:ad:4d:45:c2:25:d3:80:5e:5b:cf:52:68:bc:
cf:e4:35:37:28:20:42:7e:af:33:89:5a:0c:d2:00:11:17:61:
46:b3:03:f7:be:12:a8:4d:b0:c5:80:74:7d:fb:13:16:e0:3d:
f2:95:f8:32:ea:44:a1:38:bd:b3:c5:1b:d6:86:d0:d1:0b:83:
73:bf:8d:51:69:c7:b0:db:8e:e3:07:19:7b:23:09:b9:16:ff:
2e:d5:e4:05:11:41:af:68:dd:ed:21:ac:75:36:73:44:99:1d:
16:e0:ab:ab:f3:8e:35:1c:dc:cf:c7:45:cb:b5:f6:49:d9:23:
eb:dc:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:20 2025 by rpki-client