Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa
File: a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa (raw, json)
Hash identifier: aXSfOfJHzclkzA6SG8nDe+ibJOX3zgPTBlcssC3Z6vs=
Subject key identifier: C1:FA:EF:B1:0F:15:17:BA:26:FE:8A:49:16:EA:B7:FE:81:C8:0C:66
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848ED6852D635D4A2A43491AC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa
Signing time: Tue 18 Feb 2025 21:03:40 +0000
ROA not before: Tue 18 Feb 2025 21:03:40 +0000
ROA not after: Mon 19 May 2025 20:03:40 +0000
asID: 30036
IP address blocks: 50.81.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:68:52:d6:35:d4:a2:a4:34:91:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 18 21:03:40 2025 GMT
Not After : May 19 20:03:40 2025 GMT
Subject: CN=687d0ba8-b12a-4ed9-bf70-19f73707e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:02:7c:cc:55:7f:10:e9:e2:32:ea:b2:b3:
36:56:66:e7:e2:c5:3a:50:6a:68:96:c0:7f:94:34:
3d:a6:02:36:26:38:0b:7c:ec:a0:f6:46:ca:1c:d1:
f1:76:57:28:6f:35:02:60:74:48:bd:5e:e3:b8:51:
c3:49:2c:00:2a:8c:12:7b:31:6a:a3:dc:d3:65:f0:
cd:b9:5b:79:46:ab:86:8a:02:2a:af:9e:83:50:12:
95:ba:07:56:59:9b:0c:ca:81:00:e0:a4:57:9e:6b:
b3:98:5a:a7:5d:85:c8:0a:dc:25:b0:9a:62:30:98:
18:22:b4:3b:a9:fd:aa:2a:10:4b:e2:d3:6f:c1:46:
54:97:e6:06:09:58:06:11:a8:57:3f:f0:ba:67:74:
e1:b3:99:51:eb:a8:b3:52:78:52:bd:74:45:d2:4f:
8a:aa:4f:1a:98:56:88:dd:b2:34:a5:56:13:31:a7:
92:20:bc:79:59:9e:f7:e4:33:fd:d2:e2:56:56:1d:
58:fc:73:f2:80:6d:04:51:4f:02:5b:2b:5b:0a:38:
36:28:41:a4:a8:d4:3f:b9:37:ba:b5:b7:32:51:f9:
b0:34:e2:fb:f2:03:c8:1c:c8:b7:e9:41:5d:84:5b:
15:3e:d3:b5:18:d1:70:35:67:13:18:6d:c0:16:9b:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FA:EF:B1:0F:15:17:BA:26:FE:8A:49:16:EA:B7:FE:81:C8:0C:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:4e:96:15:8a:0d:8e:24:43:b7:87:2d:1a:57:9e:a2:f5:db:
3b:54:f5:7c:11:09:40:c6:be:9c:9b:9f:53:7f:99:97:0d:3c:
b4:e3:af:09:f9:99:3e:11:57:6e:3d:84:31:45:06:e1:95:0b:
d0:bb:3e:1d:2a:3a:99:c3:84:8f:f3:e0:3b:a9:e6:be:8f:f8:
4c:3a:3f:ce:e0:c1:95:e7:b6:9e:98:b2:6a:bb:80:ce:dc:7b:
f6:77:fd:11:9b:27:5a:62:01:11:21:88:73:ae:89:cd:6d:49:
0c:0c:56:4e:db:d8:dd:e3:2e:df:bb:57:8a:ff:3c:66:2f:5c:
77:4a:86:1c:02:4d:77:13:41:78:34:1f:02:38:9f:10:f1:66:
cb:1b:bc:de:c8:82:5b:98:80:58:b4:67:2f:f0:b7:e9:3e:3f:
45:91:88:81:3f:73:04:21:66:fd:0f:f1:63:72:76:01:2d:95:
3d:f8:ee:aa:82:0c:e7:97:1d:ce:23:98:73:c1:3c:8f:51:5d:
c4:e3:e6:3a:48:35:06:e2:1c:35:83:76:71:50:ed:6f:0c:16:
b6:6d:38:6f:ec:05:49:cd:55:33:18:86:2a:a3:f4:c9:00:92:
85:3b:db:bf:87:7b:94:84:0e:80:45:b1:40:b4:7c:11:53:0a:
e9:df:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:25 2025 by rpki-client