Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08528768-8b86-30c0-ae33-7f1f41f7855b.roa
File: 08528768-8b86-30c0-ae33-7f1f41f7855b.roa (raw, json)
Hash identifier: 0yb0Uw+CJsN0+tES8f/Q5j5iwaBKED9nuyYcsFJLj9E=
Subject key identifier: 08:04:C5:F5:05:99:A3:70:6C:E1:97:21:90:A2:E6:CF:4F:80:A1:A1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0ACE731A014E5600F8BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08528768-8b86-30c0-ae33-7f1f41f7855b.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 209.168.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:ac:e7:31:a0:14:e5:60:0f:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=e1475c74-9e27-4c06-b5be-5b52673bc1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:7e:aa:6d:36:6d:b5:f6:31:34:6f:13:4b:
9f:80:2f:e6:ea:d1:40:19:2f:65:fc:4f:67:de:fb:
99:97:3e:1b:7e:72:8e:34:fc:64:f3:2b:17:ad:db:
89:7b:ab:af:9d:d2:cc:8c:9a:e6:86:d9:b2:20:50:
b4:75:01:34:44:7a:50:7a:fe:a3:78:41:98:c8:69:
cb:96:c4:a5:76:fe:4e:ee:f1:74:51:31:22:e6:1b:
be:37:bf:45:8f:f5:da:7d:13:41:64:62:c6:bb:03:
a9:22:99:86:f7:ed:ec:73:4a:2b:92:19:47:bc:e4:
a3:79:a2:0c:09:5d:b1:11:af:e5:b9:1a:ff:e4:24:
66:bd:e3:8b:c6:30:2b:b2:72:23:de:f4:30:b1:e0:
30:88:a5:03:fc:34:a0:90:24:fe:28:b9:29:f8:b5:
ff:dc:a5:99:84:47:94:1c:2b:c6:37:78:2e:b1:06:
55:d2:13:13:9a:5c:c9:41:40:77:d9:84:11:a4:c3:
a3:1a:d1:95:4c:53:e6:f9:0b:18:a0:f1:da:1e:b0:
24:76:92:d8:96:38:86:ba:be:82:98:38:b4:91:52:
a5:d6:cf:01:24:38:ee:05:d2:69:06:c9:72:84:39:
88:c9:e5:ea:5a:81:0f:8c:81:c9:0f:58:92:5b:79:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:C5:F5:05:99:A3:70:6C:E1:97:21:90:A2:E6:CF:4F:80:A1:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08528768-8b86-30c0-ae33-7f1f41f7855b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.168.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:e5:58:30:75:4d:e9:4e:88:da:7c:b7:00:e4:a9:68:36:84:
25:98:77:86:7e:20:75:6b:f0:98:55:31:91:54:a4:3a:83:7b:
e7:30:e8:9e:c6:29:29:69:6e:3f:96:0e:80:73:a3:97:09:4d:
32:89:23:cc:df:ec:ff:cf:02:fc:48:7e:04:91:19:81:4d:3a:
40:b7:b9:5a:73:54:11:f1:16:c9:18:f8:3c:f4:19:d2:11:1d:
23:2f:42:90:65:e9:29:6d:0e:8c:a9:0b:87:c5:6b:76:d1:5f:
46:89:14:33:1a:69:df:66:c0:2f:54:86:9b:99:61:7d:39:d8:
a2:bb:db:9f:8b:25:ed:40:23:de:ca:d3:18:b9:6b:22:4e:46:
14:01:a9:8e:e0:83:98:52:63:e0:9c:70:02:75:6f:0d:48:33:
05:ea:60:ca:57:6a:ca:91:9e:07:39:86:ee:9d:8d:52:72:0a:
bd:62:64:d8:e3:48:03:ee:13:37:8e:3c:ef:ec:ed:79:8f:d8:
59:be:50:77:61:f0:16:ed:9d:ef:c7:73:4e:47:7f:2c:9b:00:
0a:10:fe:bd:b4:a3:b3:74:42:d3:89:f3:2d:c2:77:ea:03:81:
8c:01:1d:ee:97:9d:1e:04:c5:1f:f0:12:fb:4e:fd:e9:1c:97:
97:f8:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:26 2025 by rpki-client