Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa
File: c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa (raw, json)
Hash identifier: zA1aRfFKefsZMtCcf4GN6cWxK6ynQcXS9W7H1cbkzdA=
Subject key identifier: 26:65:92:B3:2A:DF:C7:3D:00:0F:28:DA:1D:5B:7D:26:9D:D2:92:76
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A3A1F1E876A9738181560
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 173.189.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:3a:1f:1e:87:6a:97:38:18:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=0f60cf36-98e0-4ace-a3a2-8cc626147e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:52:f0:7c:4a:80:4f:00:dc:08:b9:c7:f8:
9b:69:f8:1f:5e:8c:21:95:88:00:73:40:82:e7:e5:
4b:88:4d:84:df:6a:bd:4d:ca:74:ab:8d:89:92:81:
51:fe:86:0b:61:2a:c7:22:6f:9e:c0:0f:9d:c0:b3:
f7:4c:fc:7d:9f:e6:a6:7c:3c:bf:83:5a:f8:b4:aa:
e0:c9:c3:17:87:fe:c2:6e:db:63:40:75:d3:08:74:
85:5a:77:3d:cf:75:e2:52:ca:a7:cd:fe:51:37:63:
86:ec:e2:7f:c6:17:a0:aa:8e:82:f2:a8:30:d7:b5:
97:9f:47:41:82:d6:06:ab:e1:e1:26:17:48:04:c4:
07:07:07:f7:18:f5:a3:68:05:71:3b:d0:5f:1c:b0:
29:d5:e9:a5:59:05:12:6e:a1:8c:44:8e:99:e5:2d:
69:be:af:cb:f0:91:05:95:39:79:89:02:24:dc:f4:
16:63:6c:57:1f:6e:49:27:7a:f3:aa:25:2a:38:54:
6a:1a:af:e4:cd:cd:a2:9f:38:27:9e:a7:d2:11:2a:
79:be:b7:2b:ef:80:b1:dd:2d:2c:83:f5:4a:fe:13:
35:28:3d:7b:eb:c8:d8:45:c3:fe:47:2e:b4:1a:c1:
19:e7:0c:a1:82:9c:18:f1:61:bc:32:9a:b8:35:09:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:92:B3:2A:DF:C7:3D:00:0F:28:DA:1D:5B:7D:26:9D:D2:92:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:e3:28:99:34:e2:49:57:66:de:bf:2e:1f:56:71:92:ee:b8:
38:16:42:47:dc:53:11:5f:f4:d2:6f:0e:01:26:11:e2:c2:f2:
a8:a5:06:8c:04:fc:17:2d:4b:be:3e:de:d1:1c:ee:d1:d0:b2:
d0:9e:c8:6f:ce:6e:28:70:46:e3:96:dc:dd:c7:00:7d:8e:9a:
cd:48:74:32:03:46:cd:c6:d3:21:1e:22:3f:ba:87:b5:94:ca:
6c:d4:af:7e:52:2a:ef:bf:a3:61:8d:1d:a4:96:79:e5:9f:2a:
97:b7:d1:23:26:33:d3:c7:dc:1e:01:14:8a:97:36:60:3b:d3:
d6:bb:8b:0e:a5:0c:61:a3:a5:74:25:05:ca:e7:e8:62:c7:4e:
8f:57:b2:ce:d2:4d:70:e9:7c:9c:e7:91:a9:9e:9e:e0:3c:1d:
33:d8:e8:0e:7a:39:89:cd:a4:cd:9f:3e:98:cc:ce:5c:85:10:
d3:6a:87:6c:1a:e9:c4:a5:2d:ee:cd:93:af:92:4c:b3:f7:53:
0d:9c:f7:41:ac:d9:c0:92:e7:60:65:09:05:85:09:53:6c:14:
3f:8a:6b:6c:3a:87:55:7c:c9:e9:60:26:d5:aa:60:d2:cf:74:
77:e6:7c:6b:17:0e:48:bc:85:02:32:12:78:bb:26:54:96:92:
d3:77:3b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:10:18 2025 by rpki-client