Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa
File: dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa (raw, json)
Hash identifier: V9Gc6xZsaMfSPIEUmKKQrNnvnHqlPq0KV4I0ZYBShy4=
Subject key identifier: 10:1E:C4:02:F5:82:50:17:2F:8F:72:DE:F0:C4:7A:7E:AB:AF:DE:C7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15537AC67C08678CF899740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 174.131.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:37:ac:67:c0:86:78:cf:89:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=3aa8917e-1c38-4144-a09b-23994bddf710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:21:2c:bf:a5:d3:df:f6:ff:e0:86:49:e6:
21:ec:ea:71:81:cd:50:21:12:f9:ab:df:59:21:92:
d1:69:aa:41:66:cf:fd:30:ae:37:86:c1:62:f3:23:
f3:6b:d8:83:01:e7:e8:5a:96:9a:2d:21:fe:89:ba:
7b:28:3a:ac:17:94:cc:a6:e3:5b:0c:81:2d:36:96:
ad:8a:90:c1:07:f7:ba:5c:0f:ad:cf:4c:3a:ec:96:
3e:d4:8b:25:ef:ad:d5:9a:20:4a:54:c4:5d:3b:85:
9f:df:fb:ac:c9:79:b5:ab:1f:7b:31:9e:e9:bb:4d:
81:74:00:4b:ae:42:27:77:10:4f:06:50:01:d2:0c:
da:53:75:2f:08:6d:81:ee:e5:74:24:98:d1:38:34:
3e:cc:9a:8c:88:7c:0a:be:fb:db:9f:d4:c4:31:5d:
6b:50:45:a2:34:2b:a6:17:4b:52:b0:86:80:3e:59:
cb:c0:74:af:9a:27:df:b9:36:94:11:4a:72:38:d3:
ea:f3:d0:44:5b:3e:1f:26:b6:f7:f1:5c:40:30:bf:
6e:49:c1:af:64:a8:51:08:8f:26:5b:66:54:50:fc:
fe:99:97:b5:b0:68:a6:b5:cd:39:9f:2a:de:45:04:
bb:1a:cb:80:b2:25:53:f5:8e:f5:75:5f:7e:59:e2:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:C4:02:F5:82:50:17:2F:8F:72:DE:F0:C4:7A:7E:AB:AF:DE:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:12:2b:19:bd:fc:33:a6:98:eb:1e:66:cc:9e:07:a3:25:b5:
1c:09:e7:b6:c6:ab:52:ca:e1:9c:a2:3a:26:e4:62:9a:8b:f4:
ac:9a:fb:8d:27:c7:81:6f:e2:34:3a:81:f9:18:46:25:7b:55:
0b:fb:02:61:c8:ac:42:70:56:31:0a:c9:82:38:da:a7:cc:af:
f3:0f:37:79:5a:2b:c6:2e:46:82:6e:ed:8d:12:ca:a2:94:71:
8b:26:20:e5:c8:b4:18:0d:c6:5b:ad:34:bd:b2:e7:bd:e7:b7:
be:38:00:f2:7e:3e:50:13:b9:69:a9:c9:61:bc:77:44:84:40:
3f:9c:65:94:69:16:28:85:43:9e:9f:72:c1:f5:7a:65:f2:20:
5c:69:3e:9c:de:44:58:86:a3:1e:a2:9c:2d:01:00:37:74:6c:
b8:f5:12:43:ec:9d:6c:55:69:d6:72:fc:d7:f4:b7:2b:a8:bb:
42:b7:c1:ae:1d:c0:af:f3:43:d0:b0:89:ca:67:c8:f1:9e:3d:
7e:ea:78:10:9e:ea:42:81:eb:a5:88:f4:24:8c:80:0b:72:d9:
e4:82:68:84:1b:40:cb:4f:87:d7:f2:ea:e0:d0:ff:16:c3:05:
1f:b5:cf:5c:23:55:95:4b:f6:cd:6b:0c:a1:b4:5e:eb:ae:1b:
f6:aa:2a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:27:02 2025 by rpki-client