Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a71ceb7-f00b-3d5c-88dc-ab7714e05865.roa
File: 3a71ceb7-f00b-3d5c-88dc-ab7714e05865.roa (raw, json)
Hash identifier: abYBBp5Ks3IPynb6FdkLc3MEPd3/TY89xQ1v1SU/XJw=
Subject key identifier: 5B:D7:E9:DB:58:7F:AA:3F:9B:2A:0A:80:A4:0C:95:7B:98:A7:EC:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C989DA488809AD482D800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a71ceb7-f00b-3d5c-88dc-ab7714e05865.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 50.229.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:98:9d:a4:88:80:9a:d4:82:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9ef74f61-35fd-4132-98a4-7f5c57b30fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:76:84:77:e8:5c:02:f6:5d:c0:14:64:5a:
91:81:18:2d:23:09:c1:fa:3d:ad:2d:da:cf:2d:62:
7b:5b:56:24:b0:e9:2c:ee:a7:27:50:28:1d:8c:c7:
05:a9:3f:03:f8:dd:52:d2:3a:80:a0:ee:28:a3:1b:
e3:a9:78:3b:51:c6:f5:e4:4f:c5:34:a6:a0:8d:f7:
1a:0e:c0:ef:a6:c3:6b:1f:47:76:57:90:25:9a:00:
23:ca:ae:90:94:10:c2:22:8a:c5:65:40:13:c9:48:
88:81:df:ac:82:e5:76:a9:7d:64:18:e2:40:30:a7:
9d:49:c0:07:60:f1:1d:08:0a:d0:c7:dc:b7:34:fd:
64:05:21:9a:ca:e3:74:83:36:00:bb:6c:b1:4f:bd:
67:05:3f:e6:50:1a:45:6a:7c:84:c0:60:ad:0a:ce:
b8:54:66:3b:10:05:37:2d:2d:96:1e:2e:0c:38:aa:
24:8e:4c:53:f6:84:19:12:fc:90:2f:b9:70:2e:1c:
ab:79:29:47:2b:81:4d:0b:b6:0b:a1:98:c9:9d:33:
c4:0f:6e:b9:62:4a:07:59:65:e7:34:b9:6c:3e:bd:
81:10:6a:46:83:d3:94:6a:f2:c3:57:ce:f8:be:57:
27:dd:3c:d0:6d:4e:3c:80:51:1b:91:43:46:a7:32:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:E9:DB:58:7F:AA:3F:9B:2A:0A:80:A4:0C:95:7B:98:A7:EC:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a71ceb7-f00b-3d5c-88dc-ab7714e05865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.229.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:aa:40:ea:4e:6d:c2:43:53:56:2a:fd:5a:74:ea:ad:4a:20:
f4:41:67:04:e3:c7:c5:9f:7b:71:08:c4:ab:11:f9:5b:c4:1c:
a0:48:c4:83:a7:25:ce:f5:f5:00:db:14:ac:f6:0e:a0:ac:8f:
af:2c:89:2b:ed:bf:d9:ce:88:22:0e:5f:f1:55:d3:8d:b1:51:
68:bc:aa:ad:ce:df:5e:3d:46:6d:f2:db:7e:56:01:a7:e6:82:
d1:53:a2:aa:9a:78:19:8d:36:9d:4e:8f:04:e6:0f:c4:95:47:
18:5e:ac:68:34:f8:28:32:f0:ad:de:97:e1:5e:92:4a:fe:8e:
28:cd:8f:04:82:d8:ab:39:60:e5:e6:e0:c2:1d:7d:f7:f0:56:
6a:a8:ee:56:dc:32:8c:58:bf:da:d8:b1:71:a9:6b:1f:1b:73:
ad:76:2f:b7:65:e3:fe:28:75:9f:c6:9d:5d:bc:66:48:6b:8c:
3a:f6:cc:a0:71:e4:54:2a:0b:0c:38:1b:dc:fc:4c:23:38:3e:
b4:d1:c3:c3:4a:e7:98:8d:8c:e3:82:64:cd:be:c6:f2:d9:55:
c2:8e:da:f3:ec:81:6a:5d:67:5d:a9:3e:e0:e5:0f:d7:34:bb:
4a:76:e9:d2:de:74:49:f2:59:65:6f:5d:52:ba:66:cc:cb:21:
65:24:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:22 2025 by rpki-client