Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa
File: be8324fe-af6a-321e-a44f-1e817df24027.roa (raw, json)
Hash identifier: tPL8ukyraLfrqov6nXt39cFTRnpdpUkAGJk7sR5jFuA=
Subject key identifier: C3:A6:23:EA:84:01:3E:9B:9D:86:DC:08:D5:88:12:24:55:27:AE:04
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553F4602951861D81C36C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:2800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:3f:46:02:95:18:61:d8:1c:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=048e0e6e-93f6-4d1c-88eb-10895534d9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:45:02:d2:64:a6:0b:87:9a:43:ab:2d:e4:cf:
09:cd:f7:2d:77:70:22:91:f6:69:11:8f:9f:d2:3a:
74:e3:d1:fd:2d:61:46:de:7d:5b:16:dd:64:b3:f5:
70:fb:e1:74:38:14:af:46:fd:19:ef:5e:fd:72:66:
12:ee:45:bc:0b:ce:ca:94:d4:b8:cf:97:38:a2:25:
1b:e2:f4:98:c8:e5:64:fa:12:e7:88:a0:7f:c9:a0:
56:8c:60:ef:b5:3b:bd:2b:dd:d1:ca:03:7e:d6:10:
0d:71:93:2a:6e:d9:1d:ca:da:50:f4:06:97:3f:0e:
c1:e4:ad:80:8b:5c:4b:f9:9a:fe:af:75:0d:f0:d7:
8e:fc:18:c8:74:ce:15:cb:cb:51:80:31:6a:5c:d9:
2d:3b:30:78:45:b4:fe:a0:f9:4c:16:8f:d5:ac:d8:
e8:01:00:2d:a1:f2:8c:c8:70:8d:8b:1d:ed:36:46:
79:35:c4:43:74:85:58:1b:bf:d8:03:0c:c7:7a:ff:
1e:40:ce:c7:32:ad:e1:3f:92:8d:89:2f:18:f3:3b:
5b:70:82:87:cf:6b:2d:25:c4:68:f8:7d:00:0b:c6:
67:bf:2e:5a:37:3e:26:d5:0c:49:8b:40:9f:26:91:
a6:81:53:9c:55:03:f9:43:3c:b4:9b:99:8d:ed:aa:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A6:23:EA:84:01:3E:9B:9D:86:DC:08:D5:88:12:24:55:27:AE:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:90:29:0c:5d:94:26:ee:e1:7e:f2:a6:1e:d3:ee:ca:e0:7b:
bd:35:ca:86:95:46:99:6d:99:00:e0:21:82:54:fa:67:c3:87:
5c:a9:b9:52:86:5c:2c:1b:4e:d5:4f:19:2c:0e:2f:c4:38:df:
9e:17:88:b7:96:96:56:70:7e:74:dd:1a:12:6a:98:ec:22:05:
b5:bd:a0:ec:71:e5:33:31:d4:96:98:5a:94:0f:c2:5a:b5:82:
4d:6a:03:cf:b5:d6:ae:1b:c4:64:f8:c5:62:d6:1c:b7:c3:b8:
d8:db:a1:46:ce:7f:cc:5d:1c:92:08:71:70:66:aa:75:9e:90:
c8:03:e7:06:e5:91:5e:ca:58:e6:a2:cc:c5:30:5b:de:cc:e2:
99:33:a4:48:e9:6b:18:8b:e0:2e:39:ef:dd:05:55:2b:22:08:
de:20:ce:19:cb:a3:b3:b0:cb:e6:3a:cc:cc:e3:15:fe:6d:9e:
50:bc:41:01:8b:ea:90:53:3e:d3:b9:8a:91:ac:fe:96:00:f4:
a2:d5:e2:d5:52:a2:5b:a0:c9:b8:b7:b0:fa:85:01:bd:76:ac:
f8:db:6b:77:59:83:ad:db:7d:0f:77:a8:f8:41:5e:ed:07:9f:
86:6f:04:6d:86:8d:ae:14:af:ba:de:74:5b:fe:59:ee:a1:a0:
0a:dd:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:55 2025 by rpki-client