Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa
File: e825d20e-8e66-3271-be05-9ac1583f7e38.roa (raw, json)
Hash identifier: xXUUNfCzgXRQWILFA8Lvv0bsoUdW6Jvw6xqwcBakzEI=
Subject key identifier: 9E:D3:20:A2:9C:17:42:DA:9F:7A:F8:60:30:14:84:D0:6E:9A:55:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC79471723F2B894D2900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 71.31.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c7:94:71:72:3f:2b:89:4d:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=68a107f4-f9b4-42a2-b722-0448dabbdf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:12:66:37:b8:c9:a9:67:b5:94:b0:25:09:
95:09:e2:71:d8:c8:0b:e3:68:82:20:ed:b4:72:ab:
be:4e:8c:e0:cb:89:87:63:ee:26:d4:69:f6:a7:e8:
40:e4:7a:01:17:ea:a0:df:4c:5f:24:03:55:a0:93:
1d:a8:69:2d:12:41:8d:54:67:5f:e7:2e:8c:bd:ac:
63:e4:36:55:88:04:ea:2c:16:75:b4:6c:45:5a:f7:
07:fe:98:83:01:8b:cb:8e:80:ff:70:a9:4a:25:86:
bf:2f:fb:e4:7f:c0:7d:4f:49:a4:0c:53:b7:f9:f1:
33:55:9c:f8:7f:85:4b:1c:66:67:b8:5a:ca:51:a6:
59:42:1a:6f:cf:c6:64:23:a9:97:94:f9:30:1a:91:
10:72:3e:0f:5a:96:dc:8d:a1:ba:4c:1a:21:52:f4:
0e:0b:60:4a:49:af:95:49:bf:49:f4:44:d1:05:a0:
ed:29:e4:57:e9:1b:5e:5b:68:a4:15:53:5e:dd:37:
4d:8e:50:4f:83:72:7f:95:17:00:eb:50:07:8a:fd:
0f:7d:71:ba:ac:2a:72:e0:bb:3c:66:61:b8:29:c6:
5a:46:e2:bd:9a:50:b4:82:a0:7a:dc:6b:4d:6b:e3:
da:33:b0:af:fc:26:81:da:ed:9a:93:b9:ef:4f:50:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:20:A2:9C:17:42:DA:9F:7A:F8:60:30:14:84:D0:6E:9A:55:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:67:d8:c4:25:d0:ed:8b:e9:68:cf:83:24:80:da:7a:5a:2c:
7f:e7:f0:f4:d5:68:5d:97:15:ba:f0:f4:9b:22:e2:df:e7:98:
26:5d:25:ef:f3:1e:3f:24:8e:bc:60:cf:1e:50:0e:a5:19:0c:
25:79:8a:14:0e:c6:78:45:87:9a:72:47:0c:d3:fb:37:c5:c1:
f8:ff:76:1f:f6:ec:a4:28:e1:41:f3:da:73:d2:51:93:82:9a:
b0:38:a7:9f:36:bb:60:02:f5:c2:06:93:3f:c2:b0:fb:ec:e1:
ff:bb:32:ff:6d:12:b3:66:0a:2a:84:34:61:ed:8e:5f:cf:5c:
eb:30:cf:b5:93:e6:38:b8:54:9d:6f:73:ae:57:19:d3:f3:1e:
40:4a:62:7c:d1:5c:68:85:50:d1:7d:e5:8f:3a:a5:96:e9:3d:
d4:22:61:bb:a2:02:25:00:db:cf:c2:13:04:e6:11:22:37:50:
cb:a9:b5:97:92:e9:b2:e8:a8:83:b5:b1:f3:9d:26:38:17:27:
e5:9d:6c:2b:87:d6:44:06:df:0d:25:62:4f:3c:7e:f2:d1:07:
77:1d:20:43:ed:be:f3:29:e4:39:49:6e:2a:78:a8:b2:0f:bb:
40:71:12:bf:a1:c7:58:4e:f6:e3:1d:07:d2:bd:0c:6b:a1:38:
27:2a:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:22:12 2025 by rpki-client