Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa
File: f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa (raw, json)
Hash identifier: 2VI5q6GSAubsZQf3W7hwo4y/mnoNCQulPwCXMm5GEdg=
Subject key identifier: 11:E4:3A:C3:D9:80:D7:9B:AA:CA:D7:6B:42:68:5F:25:CB:F0:63:72
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A3A4C27D4A88589A68080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 71.7.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:3a:4c:27:d4:a8:85:89:a6:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=117457e1-2aea-4397-a2b4-56d4a1b45f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:19:2b:83:f5:ce:9e:c9:d7:df:9b:28:f8:
0b:6c:f1:c8:45:00:85:7a:fb:8b:57:8e:b9:8c:1b:
5a:19:6b:9e:8d:a9:40:91:3c:96:07:59:bc:8c:1b:
72:b0:fc:cd:61:11:2e:69:49:51:44:dc:24:96:33:
6e:fb:36:90:07:8a:aa:18:a4:ed:5d:62:cb:dc:5a:
48:b0:7d:22:21:4f:e8:a0:80:90:b7:05:d7:90:70:
1b:b4:14:dc:66:25:c6:33:39:7c:f9:3a:80:94:1c:
22:ae:5a:73:e6:db:45:8b:91:3b:56:b7:58:b1:77:
77:9b:53:28:39:90:b0:fc:09:3b:71:94:69:f9:2f:
f5:23:1d:ab:6d:b1:df:67:7b:78:19:21:03:02:a5:
af:40:ac:53:c2:03:a0:57:b5:bc:c8:0b:59:f3:41:
5e:1d:9d:94:27:19:b7:ec:e9:27:9f:b4:7d:43:ec:
22:37:50:16:6a:73:04:8c:fd:2c:86:6b:3f:ee:13:
1c:9c:ad:2f:d1:98:60:36:db:93:4c:f3:c0:3e:2a:
b9:f2:ad:8c:90:28:1d:57:b4:44:0c:e5:c1:44:e4:
b2:b7:34:62:ac:75:1c:50:4d:00:c0:7b:cd:83:3a:
32:b3:c3:3d:6a:78:94:25:3e:a9:75:31:08:c5:03:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:3A:C3:D9:80:D7:9B:AA:CA:D7:6B:42:68:5F:25:CB:F0:63:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.7.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6b:6a:98:94:72:2e:63:34:4e:a7:72:d8:5d:9f:8b:e8:08:
22:40:85:23:aa:d1:eb:a2:83:3c:ae:3e:6c:82:bf:63:38:e7:
1c:29:f8:ef:0a:6b:0f:ac:74:28:75:6c:4b:69:56:f6:94:a6:
63:38:a5:87:24:fc:1f:65:05:49:84:20:c8:ec:22:c5:7e:5c:
8e:5c:0b:c4:b8:14:1b:43:d4:28:d6:e9:98:83:c3:4f:01:26:
65:d5:ca:5a:4d:1a:4b:c5:08:c7:08:44:5e:a9:e3:1a:89:52:
b3:e5:d2:6b:81:38:97:b8:f8:78:95:5f:c8:6d:9b:05:35:df:
86:61:91:f3:ac:52:e8:fb:2b:f6:d8:8b:4d:8a:1d:b4:f4:a6:
d5:2b:2d:9f:08:79:30:0d:b1:19:b4:df:87:8e:39:77:51:9f:
75:f5:0c:8a:e3:8f:c5:ba:f0:2b:df:43:28:2a:82:cd:43:79:
46:80:c0:23:2f:cd:54:ce:e2:a1:76:84:ca:a9:74:60:77:63:
db:9b:9f:5e:42:b7:5d:4f:bd:ea:4f:6a:b3:13:7b:f7:67:51:
a9:26:83:8d:b8:19:f0:62:88:c3:45:1e:f5:d0:88:0b:ae:66:
a3:81:36:39:fa:f0:e3:29:e6:1f:ff:7b:3d:9f:84:50:03:20:
0c:5c:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:01 2025 by rpki-client