Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9071b35-17c1-3d8c-8c47-a6ef4f193711.roa
File: f9071b35-17c1-3d8c-8c47-a6ef4f193711.roa (raw, json)
Hash identifier: GcBuGEzYNLDIjaRvzu5/2yiKtDePmHjSDLUyRKRQpR4=
Subject key identifier: FB:EC:A2:1F:6C:D8:76:A2:3B:1C:A1:ED:85:50:AA:6E:E0:4B:A4:A2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154F4F35BC5C82C987DDD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9071b35-17c1-3d8c-8c47-a6ef4f193711.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 40.134.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:f4:f3:5b:c5:c8:2c:98:7d:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=167d44e9-8259-41c8-9a0f-ddd43627e5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:e9:8c:35:14:2e:16:a9:7e:7d:56:38:51:
0d:a9:ee:1f:a5:8c:41:22:18:ee:44:92:c2:15:b9:
09:ff:7c:a3:d7:17:44:c3:21:59:f9:72:85:cd:13:
73:0a:19:22:69:65:bb:72:90:15:9a:e4:9d:c6:0a:
c5:79:3f:d4:72:05:9c:66:26:c4:f2:13:71:e5:9f:
da:63:05:eb:a7:ad:fa:98:2d:71:60:0e:c2:b5:7b:
fa:1f:55:f4:6e:fb:24:35:7c:dd:a4:1d:77:95:c9:
cf:fe:1c:a5:85:1c:9c:4a:2a:e6:5c:68:75:5a:0e:
57:a5:83:4d:68:e0:d1:82:03:67:65:c3:4f:5c:93:
0d:9e:dc:24:ab:48:10:f7:e7:7f:35:bf:c6:ac:6c:
5b:45:02:e9:e6:6d:e9:5e:cc:1d:7e:5a:59:c1:cf:
b9:95:e9:03:40:00:98:6f:d3:6f:c5:62:f8:fb:89:
22:83:b4:fb:5f:56:d6:52:66:0c:5b:5f:e0:1f:35:
2b:ff:2a:aa:c6:84:56:5e:29:b5:96:34:9e:73:28:
5a:08:ce:df:1e:de:a7:75:e7:0e:4f:3b:94:d4:34:
09:17:07:89:3e:93:04:36:09:9c:70:e1:f9:da:ba:
b5:e6:9e:21:75:df:af:75:fa:d2:f3:55:19:d5:7e:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EC:A2:1F:6C:D8:76:A2:3B:1C:A1:ED:85:50:AA:6E:E0:4B:A4:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9071b35-17c1-3d8c-8c47-a6ef4f193711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.134.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:aa:70:e8:05:e1:08:ad:73:80:d0:0c:8d:82:68:63:4e:b6:
6d:33:26:fb:96:fd:34:7b:c7:6f:52:8f:df:d8:8a:92:3a:ec:
34:18:ed:08:4c:e5:ee:31:07:18:ac:d2:c0:d3:82:c6:ca:f4:
bb:25:0e:8e:1a:f3:78:b7:d5:72:fb:57:e6:03:ae:49:27:32:
7b:f8:57:d1:ed:6f:6b:6c:f1:2c:65:91:a1:e0:b4:5b:e4:6a:
f9:24:5b:b4:79:96:69:e7:f0:9f:cc:5a:c9:70:7f:54:85:61:
fc:c4:81:21:eb:63:b5:b3:e7:cb:50:fe:b8:0d:85:7a:c4:ff:
89:e5:e9:1d:dc:0e:a7:ca:14:0d:f6:da:42:17:f9:55:0b:95:
4e:05:59:f7:35:ac:53:99:a0:d9:9b:d0:5a:d2:90:65:86:3a:
4f:31:34:b3:e5:2c:f8:63:8c:22:ce:90:d7:87:ce:4b:50:de:
67:06:b9:95:b0:07:ea:95:78:c2:d8:bb:4e:2b:c7:33:fc:7a:
78:6d:38:8f:75:89:b2:e5:20:0f:ee:0d:d9:3c:06:b1:33:46:
cc:b4:d2:70:e1:6b:41:26:fd:2d:4f:b6:4c:ca:d2:71:2a:8d:
0d:55:e8:30:f9:4a:e7:fe:af:fe:7e:74:b5:07:7d:c6:56:e6:
2a:38:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:14 2025 by rpki-client