Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d28833b1-82b4-3580-9997-e10e5e94eaf9.roa
File: d28833b1-82b4-3580-9997-e10e5e94eaf9.roa (raw, json)
Hash identifier: jingmqX5heMg3/qTo8tsYSOr89JzpLsq+rsgqmgoMz8=
Subject key identifier: E8:9D:40:A5:09:AF:B5:F2:B7:AF:53:F0:02:86:7C:85:49:56:78:28
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858487817D5A001A3690F58153880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d28833b1-82b4-3580-9997-e10e5e94eaf9.roa
Signing time: Tue 07 Jan 2025 20:31:55 +0000
ROA not before: Tue 07 Jan 2025 20:31:55 +0000
ROA not after: Mon 07 Apr 2025 19:31:55 +0000
asID: 7029
IP address blocks: 71.30.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:17:d5:a0:01:a3:69:0f:58:15:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 20:31:55 2025 GMT
Not After : Apr 7 19:31:55 2025 GMT
Subject: CN=293c1c3c-dfa4-47ba-9d84-9021998b95bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:ae:08:6f:f9:41:17:1b:0a:44:d8:8f:65:
ac:43:f0:10:97:b4:d7:f2:0f:b8:97:ba:18:9c:33:
ab:e9:23:a6:84:ce:3e:e6:b0:27:aa:95:b6:5e:2b:
bb:45:20:2a:fe:69:5e:5f:ca:3e:1a:c1:a0:4e:11:
84:48:bd:5b:9c:7d:78:93:9d:43:c7:7a:80:33:83:
59:4f:37:89:f6:6d:c7:68:43:bc:35:89:0b:fe:68:
37:da:4d:cc:04:3a:af:7c:b2:e1:82:87:55:00:34:
96:15:2a:b3:15:5b:5b:16:de:35:81:c7:28:d9:37:
87:e0:c9:11:c9:e9:51:6f:b1:e5:1c:cd:55:49:64:
5e:3c:d4:80:f5:23:dc:1c:4b:3b:84:d3:d2:d0:50:
9c:39:70:23:bb:d5:f1:3d:01:3b:1c:1e:75:22:15:
ec:69:e0:15:3a:08:7e:57:c7:88:2a:db:d8:d0:79:
08:63:4f:03:e7:55:6c:0e:2a:d9:34:04:c0:28:ca:
ae:dc:8a:83:84:1a:5e:56:3e:cf:26:b1:a7:65:5e:
86:1f:3d:98:1e:7e:29:5f:88:f0:e5:0f:4f:cc:15:
ee:a1:8e:54:3b:5f:75:80:7b:8d:75:66:fb:de:fe:
a6:3f:1d:1e:38:80:04:71:b1:6d:86:6e:da:0d:21:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:40:A5:09:AF:B5:F2:B7:AF:53:F0:02:86:7C:85:49:56:78:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d28833b1-82b4-3580-9997-e10e5e94eaf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:58:55:51:15:bd:31:10:02:d3:de:91:f1:82:07:5b:28:c2:
d0:bb:68:d1:2b:02:85:05:e4:55:03:f0:75:ee:bd:fd:49:bf:
00:37:41:bb:4f:b4:e2:64:ad:58:84:e1:88:44:a5:ce:aa:df:
80:05:97:d7:4e:34:bf:f3:66:59:95:d0:cd:12:45:83:5d:1d:
ad:64:a9:2d:6f:06:37:20:d1:70:ab:97:65:10:7b:f3:73:07:
73:0a:8d:4a:92:c8:71:a4:cd:a9:90:ae:b5:12:e3:46:ad:f3:
2e:6b:43:4e:45:68:c3:24:08:95:c0:99:ff:10:ce:a7:72:c4:
55:06:d0:dc:b5:75:be:ca:09:a8:98:3f:00:f4:83:9d:df:1e:
60:07:47:79:08:03:a2:c5:b8:7e:85:f8:23:5b:d2:7f:ae:67:
cc:58:bc:93:ff:3d:8a:18:b9:16:1d:d6:12:7e:54:72:df:b4:
ff:fa:58:e3:98:8b:93:74:ef:15:6a:e8:c7:b4:b2:48:f7:05:
7c:4c:b2:b0:9d:ab:42:fc:0d:4b:05:57:99:99:f9:b0:8b:8b:
5f:4f:66:ec:84:e9:59:fe:6b:fb:fb:de:97:c8:a7:95:ef:70:
89:76:81:3e:9d:5e:df:5e:43:c6:3c:9f:dd:a5:89:cb:09:5a:
78:8e:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:03 2025 by rpki-client