Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa
File: c9d29c32-a313-3797-8f77-559ae3991224.roa (raw, json)
Hash identifier: vUkJXKQdhAgKaCF+CgddX0wtQtKQ8VrCqncu9SE9vac=
Subject key identifier: 2B:B9:14:ED:9B:F1:C3:09:CF:CA:5A:3F:B5:86:8D:AA:A4:5B:5C:A7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550F2EEBF3CD3478EB3580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:0f:2e:eb:f3:cd:34:78:eb:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=a415a3a3-6758-49d9-8d86-df974f31556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:08:20:ec:50:a7:0e:08:8c:ff:4f:75:b4:
67:12:69:3b:a5:fe:d4:18:7a:d1:7d:6a:0c:e6:c1:
ea:9f:4c:3e:32:90:70:45:44:1d:26:28:54:dc:91:
b0:8a:a4:8b:17:69:7d:a3:d6:e3:78:40:0c:60:14:
af:5b:ef:bb:9d:58:37:e6:61:48:9d:1e:73:42:ff:
24:c0:a5:5b:15:7a:92:d6:54:45:dd:49:32:01:3f:
76:10:3a:90:ce:c2:e2:5e:86:c1:c2:23:3a:ed:3c:
68:43:f2:29:ae:78:b8:81:ea:4c:09:2e:ba:9e:f6:
10:52:0e:ff:8d:8f:34:d6:84:f2:f8:56:d6:08:d4:
6a:5e:c6:22:ae:ae:d3:a4:75:06:02:bc:82:cc:96:
b7:c3:ab:da:21:94:26:b5:0a:6b:06:ad:4f:ca:5f:
89:f3:82:54:72:44:50:4d:f3:1d:7e:0b:b4:9d:21:
6c:b9:92:98:10:13:33:1c:27:eb:e6:57:44:9e:6d:
f7:80:be:21:16:17:93:11:76:c1:86:b6:48:a7:22:
88:96:06:07:10:7e:65:71:bf:09:d8:9c:5b:c5:5c:
9b:12:02:0e:76:cd:42:af:e8:f0:c8:ee:76:3c:8c:
d5:b0:e6:5a:71:a3:02:73:eb:7b:95:98:f6:67:71:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:14:ED:9B:F1:C3:09:CF:CA:5A:3F:B5:86:8D:AA:A4:5B:5C:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:18:99:d0:30:b7:4d:5f:7f:b8:3d:38:6f:59:a9:75:fc:a0:
24:44:86:3f:4b:30:f0:fc:1e:4b:5b:72:34:89:5c:28:21:dc:
70:85:a4:7a:45:c6:93:35:11:d9:c5:27:7c:9f:20:a2:c2:dc:
1d:0c:46:28:e9:e5:02:77:c0:c9:77:cf:c3:4e:23:db:ef:5a:
7e:91:a6:e7:65:71:68:4b:4e:ca:ec:f6:02:6a:bb:19:86:ad:
ee:28:9a:77:1c:a8:fc:da:e5:dc:43:46:59:9b:64:6c:5a:ce:
df:a6:15:35:ba:0d:9b:12:f4:35:dd:fa:e5:b6:6e:dc:29:2e:
d8:ed:6f:05:14:e6:dc:05:48:83:27:f2:ad:75:02:41:8d:b1:
19:89:ea:af:69:4c:0d:0e:20:eb:2f:a4:65:b3:8e:e4:a4:f2:
89:7c:75:f6:d1:1a:5e:de:11:bd:8a:8f:d4:ca:7b:cf:f2:18:
4d:21:43:89:c9:a2:f6:24:be:c8:7a:f6:91:b5:03:09:2f:79:
ac:eb:fe:b5:f9:be:b5:d3:6b:fc:5c:62:13:f0:16:5e:1f:58:
f8:c1:77:8a:ba:e7:ea:da:ba:de:d2:6c:71:8e:0a:80:60:41:
a3:16:1a:2a:1f:9a:a1:05:82:37:99:2b:cc:42:4b:c6:59:04:
6f:97:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:39 2025 by rpki-client