Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7973aa01-2397-34c2-ab71-25917a8d7516.roa
File: 7973aa01-2397-34c2-ab71-25917a8d7516.roa (raw, json)
Hash identifier: dECAfKnYhXD3+tAQQZ55AmIr+SZIauCgjcpr0+J3Gck=
Subject key identifier: 74:D4:47:8A:89:0C:8B:0E:BB:27:C0:EF:2C:01:E8:E9:D6:62:1E:A7
Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial: 010D0C9F432858486EF5BDB329D6E2AA972FFA80
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7973aa01-2397-34c2-ab71-25917a8d7516.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 11377
IP address blocks: 50.31.32.0/20 maxlen: 20
50.31.48.0/20 maxlen: 20
159.183.244.0/22 maxlen: 22
159.183.248.0/22 maxlen: 22
208.117.48.0/21 maxlen: 21
208.117.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bd:b3:29:d6:e2:aa:97:2f:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=9818ee0f-8e2f-4cf8-a14c-82950b99a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:20:f9:c6:52:5e:06:ff:05:f8:99:85:b5:
ce:0a:44:d6:0a:fa:1e:f3:78:42:6b:eb:ca:e7:1c:
d8:15:79:d0:41:9f:55:40:de:f8:08:64:78:2c:1d:
05:2b:38:aa:36:38:eb:0c:6c:55:b4:04:22:56:20:
fa:90:f1:80:c3:ab:71:10:ba:75:3a:76:03:f2:7f:
3c:c3:4a:d1:11:04:e7:01:27:50:41:82:3b:ee:cd:
c3:34:32:4d:6f:6a:e1:17:8a:08:80:cd:54:2c:fd:
25:d7:20:de:a0:bf:8a:e2:40:ad:81:de:0d:83:05:
7a:19:3b:27:75:ba:aa:52:ba:7a:f1:f0:4a:c0:51:
92:ac:3c:c6:96:3f:8e:bf:31:40:da:28:6a:fa:c0:
b3:63:96:87:83:6e:fe:6d:12:d6:be:b6:fb:73:d8:
8f:f0:1e:03:35:d9:2f:ab:8e:f7:f5:d6:9d:29:57:
dd:32:1b:75:cc:0c:66:27:02:a2:c7:74:71:96:4e:
63:a8:ba:b6:a2:41:69:74:c4:81:25:54:90:a2:9a:
be:55:72:af:3b:d0:d3:72:4b:82:f5:f6:c6:db:7a:
bb:ae:d2:89:f4:31:66:7b:9b:36:d5:c1:62:48:37:
9a:61:2d:1e:bd:15:99:06:a7:20:c8:92:92:c0:0d:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:47:8A:89:0C:8B:0E:BB:27:C0:EF:2C:01:E8:E9:D6:62:1E:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7973aa01-2397-34c2-ab71-25917a8d7516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
X509v3 Authority Key Identifier:
keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
sbgp-ipAddrBlock: critical
IPv4:
50.31.32.0/19
159.183.244.0-159.183.251.255
208.117.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5a:d2:ff:2b:6c:c9:d5:55:24:2c:2d:78:fc:9a:47:2a:6d:
53:bf:57:48:ea:a4:7b:ca:b1:69:c4:7b:de:76:b1:1b:9c:ad:
04:a8:f9:d7:e8:10:c9:5d:10:8d:92:e1:2d:7e:e4:23:1a:15:
c5:55:ca:3a:bf:6e:53:45:a5:ab:ab:b8:d1:39:53:dc:31:84:
c9:fd:42:17:3a:12:00:65:c0:89:97:b6:76:a9:4c:d5:3f:2a:
9b:c3:05:66:44:77:13:ef:3c:b9:5b:8f:b2:f2:3e:2c:c5:e0:
fb:27:d5:d5:e8:43:50:30:e0:d1:46:37:0d:5f:21:69:88:1c:
67:3f:94:32:28:28:d8:d6:cc:65:49:d1:25:00:62:91:17:94:
64:7c:35:d3:5a:4d:01:4c:ae:6f:16:37:73:d6:df:19:a4:09:
8e:60:94:9a:83:5c:5d:a2:ca:07:a4:ef:fa:69:01:26:ac:2e:
38:a7:5a:34:5b:40:49:0f:07:4f:7d:ba:2d:39:11:90:05:1e:
3e:35:ba:d8:ed:29:3c:c2:1c:dd:7a:87:0c:89:b3:85:7c:3e:
3a:c7:6e:b1:f4:b1:c0:2c:64:b2:e6:52:f8:4d:72:d6:ee:5b:
bc:6c:48:8e:8d:00:6a:7c:03:9f:9c:b1:82:cd:04:d6:13:5b:
a1:57:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:56:53 2025 by rpki-client