Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8e4fa85-dfad-349d-a114-06a1be2b03bb.roa
File: f8e4fa85-dfad-349d-a114-06a1be2b03bb.roa (raw, json)
Hash identifier: CqVv6eOYR8zC8Nl5to5O7bAQ1B3Aibn8zoFDzBP690s=
Subject key identifier: 2B:DB:01:A2:A4:E9:90:42:8B:30:BD:ED:27:36:54:65:5B:BC:C7:64
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FC77D44B3C6285A70380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8e4fa85-dfad-349d-a114-06a1be2b03bb.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 71.29.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fc:77:d4:4b:3c:62:85:a7:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=42340102-cf3a-4805-b116-1da24668b533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:bc:20:ac:2c:3d:06:aa:81:3a:96:87:35:
54:50:b7:fc:2b:2d:07:03:13:5f:cb:45:88:d6:f7:
da:0b:59:88:58:79:b8:7f:ba:8a:e9:ca:08:ce:c2:
0a:bd:ef:91:8b:56:8c:50:69:ee:18:9e:2e:dc:b3:
e2:8c:7d:8e:01:48:86:7d:bf:73:15:88:ba:83:f8:
2d:1f:b8:cc:d2:cd:91:62:78:df:e9:a5:fd:6a:a0:
83:e6:20:99:8b:ce:0c:d8:68:3e:25:33:00:a3:29:
3f:5e:be:1a:fc:d2:6d:bf:09:cd:55:8b:7f:4b:09:
9a:4f:3c:7b:e6:78:bc:22:e7:2e:58:8d:17:6f:62:
98:34:b6:d9:33:61:07:56:55:ea:fc:ee:1c:39:f0:
d5:74:29:9f:ba:63:c6:6e:0c:59:cc:f1:84:bc:ea:
af:ed:f4:da:d6:c8:04:af:cb:e6:83:27:93:01:9d:
4f:38:ab:6e:11:bf:52:87:1a:4c:ba:30:5a:44:18:
bd:74:a8:bf:f7:d2:cf:a7:e2:65:3b:ca:d5:0d:3f:
70:7d:26:54:b0:10:cb:2f:1f:02:b9:3d:90:0f:6e:
8b:87:b0:21:8f:46:e7:17:69:4e:61:36:4a:ac:da:
08:f5:35:82:84:b3:05:74:9a:02:8c:b7:d3:ad:14:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:01:A2:A4:E9:90:42:8B:30:BD:ED:27:36:54:65:5B:BC:C7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8e4fa85-dfad-349d-a114-06a1be2b03bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:5a:8d:d9:b3:5d:e4:80:58:9a:59:ae:47:1e:2a:80:d4:13:
db:62:21:4c:b1:20:c3:56:4f:af:65:0e:1c:4a:d1:86:b9:65:
72:35:9b:77:45:28:e2:45:46:5e:2a:10:7b:4d:b0:f0:5a:7b:
57:dc:92:69:25:9c:12:c6:07:5e:87:a4:8f:3d:c7:59:4b:c8:
e5:cf:91:f5:70:3e:16:29:3a:77:91:6b:f1:fc:b9:aa:c4:52:
58:be:b0:74:d0:b3:12:b1:79:51:72:91:26:d3:14:24:4f:65:
72:8b:70:27:ff:93:0e:de:6c:86:81:e8:95:06:b0:92:a0:09:
3e:08:a7:29:61:6d:f6:bb:00:f3:67:d6:56:52:05:da:f4:76:
7c:2a:a9:73:15:59:bb:29:79:e1:17:5d:ab:ec:88:82:8a:46:
e6:7b:cf:f4:24:08:c7:df:77:c0:6c:7c:85:18:ba:71:24:3f:
22:9f:58:26:4f:47:a0:02:f2:5a:98:e0:b8:5c:2a:d1:a7:db:
01:ef:91:1a:14:d5:2f:35:bf:e0:79:b0:08:82:c3:24:fd:cc:
a3:ef:11:3f:15:bd:a1:87:01:3e:51:a8:5a:02:57:c9:01:61:
38:ed:97:fd:70:8c:86:4d:47:69:e4:2e:7e:f1:e9:b1:fe:2f:
e4:e2:45:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:58:35 2025 by rpki-client