Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9e1e37-9312-396d-b8ef-bd83a74b0954.roa
File: da9e1e37-9312-396d-b8ef-bd83a74b0954.roa (raw, json)
Hash identifier: hsyXC9BPHf/Yu5XWGCut5vesfMtk9xrdHau7k8lHw08=
Subject key identifier: 8E:5C:77:65:E5:00:48:DF:44:1C:53:E2:A7:3B:B0:E2:02:2D:3B:F9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FCA4D3FE1372CBFA4C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9e1e37-9312-396d-b8ef-bd83a74b0954.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 71.30.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fc:a4:d3:fe:13:72:cb:fa:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=eda40c7f-4380-4e72-aeb4-7cb3b0a4107f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:2f:51:29:09:4f:71:3c:bb:f8:a8:bf:37:
51:56:bc:d2:30:a8:05:82:34:a9:4d:cf:6d:fe:3e:
8d:10:ee:c8:68:dd:bd:b9:3a:cc:31:d2:af:8f:ad:
80:13:08:55:01:33:8b:d1:05:0b:88:19:dd:68:c3:
c1:f8:47:f2:bb:14:6a:fc:f9:4c:72:6a:da:2d:a1:
d8:25:5a:09:f7:8e:ad:40:53:9e:6d:b7:5d:3a:23:
09:69:e2:bc:9a:cc:2f:9f:0d:9c:f1:22:27:ba:4e:
6d:ca:ad:d0:ce:24:a1:27:f7:9f:c1:a0:e2:2d:16:
77:60:8f:bd:73:5b:3b:97:3a:89:bf:a6:93:da:eb:
35:08:f9:f5:9f:9a:be:75:e4:a3:ac:46:79:74:03:
b5:13:2f:d3:7d:60:39:cf:70:ad:05:b8:14:a3:b9:
eb:aa:97:2e:95:87:64:de:78:50:94:b8:3f:9c:88:
a3:21:9a:d0:4a:58:db:07:d0:e2:e0:6e:dd:ca:0d:
17:bd:45:d4:ad:98:66:a7:2f:d7:f9:7d:7d:6b:f7:
35:e7:11:95:2f:c1:e1:e1:68:25:65:95:72:b1:10:
b0:e8:5a:1c:61:a6:b9:bd:fa:58:ef:b6:c5:82:8c:
e5:65:5c:d7:03:14:f8:6a:f8:4f:c2:20:e4:ac:9e:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:77:65:E5:00:48:DF:44:1C:53:E2:A7:3B:B0:E2:02:2D:3B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9e1e37-9312-396d-b8ef-bd83a74b0954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ba:33:20:e5:b2:66:4b:f8:18:dd:e1:7b:36:b6:1e:5c:2a:
bd:34:f0:5a:5e:f1:60:46:50:64:cb:9c:95:e0:ef:ea:d1:9f:
78:4c:d0:f6:a2:7b:da:a1:bf:8f:20:74:68:99:6e:b4:eb:92:
b6:8a:54:67:76:8c:2e:59:91:64:6a:98:e2:0a:44:d6:e8:71:
d3:a8:a3:8f:a7:4b:4f:38:17:8a:fa:35:d9:30:f2:40:9a:0c:
97:72:0a:98:ae:ce:84:bc:b4:14:7b:7c:4c:73:80:72:91:39:
6a:ae:19:40:6a:76:32:bb:8a:c7:e6:e9:b5:61:51:ea:7b:70:
30:1b:09:0f:44:23:9b:b0:02:83:cd:23:32:ff:77:2e:9e:15:
6a:c6:46:d4:a8:d9:e4:82:c4:a9:7e:4a:c7:db:cf:55:9a:6c:
91:9d:82:74:e2:15:18:f7:bf:44:8c:8e:3e:93:e9:dc:04:3d:
31:10:81:e1:8b:4f:e6:e7:f7:9a:16:a9:36:ff:1e:cc:be:57:
5d:40:99:cc:67:24:9c:94:e1:38:6b:39:e3:24:82:ec:5d:0b:
f8:f6:c7:f4:fe:8b:51:e0:62:a8:a6:7b:1a:75:4f:10:c3:0a:
43:d0:db:71:53:ae:67:6d:66:76:17:dd:7b:2c:e1:41:f5:2a:
d4:1a:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:46:29 2025 by rpki-client