Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa
File: f363de57-c40e-349f-b019-70a573f7e01a.roa (raw, json)
Hash identifier: e+O7IiEOMEXaKKQgnnHA4hWQYHbDumfTPPZZJy39Z/8=
Subject key identifier: DD:DE:6C:98:E7:61:3A:71:64:54:AB:37:FE:0E:CA:E7:1E:87:AC:76
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550CD1EAF725478B0FCE40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 216.235.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:0c:d1:ea:f7:25:47:8b:0f:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=aef4aecc-e75b-4233-8cf6-2a01c92d65e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:4c:eb:11:8f:1c:2c:23:47:12:44:e3:6c:
7b:a4:6f:f1:cd:d0:8f:5a:74:15:dc:53:ad:35:57:
13:24:dc:c9:4f:ed:6f:36:40:b5:ba:e3:23:23:73:
a8:b8:7b:10:75:1f:bf:4a:02:89:5f:41:30:bd:c5:
01:f9:30:77:4c:26:6d:06:cc:49:f4:32:29:a5:a0:
e2:17:02:f0:b0:56:c9:0a:39:a8:1b:e0:38:c3:ad:
81:18:5b:c3:71:5f:b7:50:0a:b7:d7:a6:14:cf:7f:
08:10:5a:dd:8e:5c:71:53:23:21:00:44:c5:93:2e:
9f:da:dc:53:c4:87:b6:a9:97:c6:14:c5:d4:c9:c6:
7e:83:24:58:6f:f6:88:d6:c8:e4:64:39:d2:89:b2:
34:ec:08:77:2b:c0:ec:25:6f:8b:dd:e4:cb:fa:0b:
4b:07:1c:1a:b5:4d:50:a6:37:46:f1:d2:d2:ab:26:
db:f2:55:fa:b0:f5:eb:c1:61:3e:36:76:2c:8e:34:
ab:a6:9d:2f:4a:aa:d7:b3:3b:24:db:3d:39:33:28:
a2:49:39:dd:c4:5f:73:f3:b5:13:f7:93:fa:67:b5:
b0:16:09:d1:7b:25:6a:20:4c:9b:1a:3f:e1:b9:a0:
d3:c0:0a:13:b9:20:c2:1f:9e:38:98:83:f7:65:c5:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:6C:98:E7:61:3A:71:64:54:AB:37:FE:0E:CA:E7:1E:87:AC:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:81:23:cf:2c:bf:d9:63:14:0d:d8:94:b2:df:3b:82:ae:fc:
29:c6:47:54:99:fe:ba:9c:f8:db:9a:e6:c8:d4:75:4f:38:48:
25:30:8e:98:77:67:cd:33:d0:98:69:ea:3d:84:20:b5:6a:42:
b9:44:98:b5:09:5d:25:7e:53:07:16:44:f0:43:84:4d:8f:78:
ad:ce:77:44:c4:9a:a6:5a:9a:4d:c9:a4:6e:10:ad:a4:aa:c7:
f7:40:90:cc:61:57:f0:6c:4c:f6:8d:c7:74:16:9c:b2:9a:5b:
a9:ae:85:6b:34:7e:ea:15:6d:8d:59:38:3b:c7:52:bf:09:99:
49:f4:9f:ba:c7:ef:96:54:4d:79:88:83:7f:7a:73:87:4e:e4:
08:a8:90:8d:22:f1:98:fc:af:2d:51:68:4c:a9:98:56:1f:64:
2c:28:21:49:45:76:90:7a:ec:a5:ed:6c:4d:c9:3f:70:83:8b:
95:e0:f9:c3:a2:25:7d:42:77:37:f7:60:7c:a7:b1:b8:5d:93:
b0:a4:d1:9c:62:d3:c3:f4:17:1d:09:d5:49:c0:88:6c:30:9f:
f6:d3:48:73:dd:dc:2d:67:ec:dd:c3:bb:c2:f3:c1:26:5b:55:
fb:a7:39:10:04:6d:24:f0:af:3d:15:8b:7d:c9:53:ed:68:a3:
72:28:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:06:17 2025 by rpki-client