Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5b488af-c78e-3563-af4a-4d6a2faa0972.roa
File: b5b488af-c78e-3563-af4a-4d6a2faa0972.roa (raw, json)
Hash identifier: /PC11xPbvPPwO9XnjpbJGtq1vkYQnXRrZ97bIrKT1k4=
Subject key identifier: 88:D0:FD:68:B7:32:74:C5:6B:64:E1:37:4C:C0:02:AD:B7:56:E8:22
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53329C7765F0B54BB7A9500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5b488af-c78e-3563-af4a-4d6a2faa0972.roa
Signing time: Tue 04 Feb 2025 11:24:13 +0000
ROA not before: Tue 04 Feb 2025 11:24:13 +0000
ROA not after: Mon 05 May 2025 10:24:13 +0000
asID: 30036
IP address blocks: 50.82.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:29:c7:76:5f:0b:54:bb:7a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:24:13 2025 GMT
Not After : May 5 10:24:13 2025 GMT
Subject: CN=ffde4791-a90c-422e-8b07-bc9d4f1f2282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:c7:bf:a5:30:4c:21:c0:23:7f:82:3a:a7:
91:e1:5c:11:27:99:bc:04:5c:d3:94:cd:c0:ec:f5:
ba:65:b7:7a:5d:d6:6e:b5:f6:d4:e8:e0:16:3a:cb:
a4:e7:95:29:a3:14:ff:32:4e:fb:a2:ff:de:83:b9:
fb:b5:8c:8b:a6:66:27:89:66:58:fa:a1:0d:88:92:
4e:56:11:4b:20:d7:e5:b9:f6:d6:fd:d0:95:89:2f:
99:50:59:2e:64:88:f6:d1:6e:97:1b:a2:8c:af:45:
4d:c3:4d:62:1c:96:19:04:cb:96:6e:a2:1a:af:cb:
cf:1a:75:49:36:fd:9f:e0:76:da:ca:5c:a9:e9:31:
f3:1a:e3:f4:c7:ea:be:be:c1:5d:36:1a:c6:76:73:
bd:e0:2c:8e:fc:a9:ec:7c:c0:70:c2:c4:11:97:64:
bd:bb:cb:d9:c0:5a:34:67:a5:68:fa:30:83:39:c8:
76:30:30:b2:4e:6b:7d:ef:90:c8:9a:c3:88:13:12:
f6:28:f5:da:4c:fc:69:45:22:71:7e:ae:6a:81:75:
0c:f7:44:59:c0:ff:6b:21:e7:56:96:a5:ae:49:d4:
01:ca:b9:f5:97:30:9c:0b:87:0d:6d:cb:e3:bd:5b:
b8:77:a5:a9:0a:0f:8f:79:3f:0e:6d:47:61:8f:47:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:FD:68:B7:32:74:C5:6B:64:E1:37:4C:C0:02:AD:B7:56:E8:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5b488af-c78e-3563-af4a-4d6a2faa0972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.82.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:df:64:43:87:21:2e:d4:a7:44:c1:2f:5b:ec:56:db:30:51:
37:65:e8:41:8d:05:f6:8d:cb:99:e7:f0:ad:bd:0d:f2:0f:a7:
90:1c:19:96:d7:e4:b6:49:24:43:6d:38:05:3d:46:3c:61:4e:
65:04:4b:11:8d:f5:16:fe:eb:2a:59:f5:3f:fd:35:6b:44:5c:
33:4e:75:44:43:2c:8f:a5:60:d4:b6:fa:95:83:d2:18:04:93:
60:73:d0:10:7b:78:98:10:c1:3d:cb:27:5a:e8:de:3b:c4:46:
05:f1:b5:e5:0e:8d:6b:8c:ed:10:f9:df:70:a6:df:cb:5e:b5:
71:a5:d1:73:91:27:b9:74:45:cf:3f:50:ab:7b:ee:45:cc:20:
00:d0:e5:f7:48:41:dd:2a:68:e5:c8:9b:3d:77:5a:ab:3d:d9:
4c:ce:e0:b7:4a:c9:9d:5b:a0:bc:2d:13:67:9b:61:47:f7:fd:
5f:3f:2a:9b:54:0c:d7:9f:7d:65:5d:80:d7:a5:77:40:c5:a6:
6f:9c:e2:cc:28:73:16:62:f7:3f:cb:1d:78:67:7f:b7:e8:0c:
0f:fe:5e:85:31:d9:e5:62:0a:e9:49:02:3a:c8:67:9b:66:53:
91:ce:d3:64:c0:c2:24:5f:c6:6a:a7:a8:4f:f0:75:77:6b:34:
e3:26:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:41 2025 by rpki-client