Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa
File: 0a90a390-d0a5-365f-9730-fddae514051e.roa (raw, json)
Hash identifier: K3q4n3HEUUehIJPa6HtBp1qwwzbvEjquWnR00vf8TAI=
Subject key identifier: 2B:12:FE:27:4D:67:CE:CF:86:99:35:5E:B9:D7:4F:66:F9:B6:AF:48
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112471659F22F920998B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 199.195.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:24:71:65:9f:22:f9:20:99:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=ee3c3438-d545-4c07-9c5a-28a3ff401111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:5c:07:7e:eb:be:36:73:85:d5:3d:d7:49:
97:ab:25:3e:ef:2d:ae:cf:d2:07:64:69:05:21:3a:
46:01:38:b8:62:6e:7b:51:c1:7b:8a:3f:51:a3:4e:
66:65:18:23:ee:65:f4:fa:fa:f2:d6:c7:d6:01:ac:
4d:f0:32:87:9e:3b:fa:67:ce:ac:71:2f:19:07:05:
dd:8e:35:cc:eb:08:66:7c:39:90:81:de:36:64:c9:
ac:f6:91:b6:3f:11:94:14:55:0a:9a:5f:3f:72:1b:
1c:1e:d5:12:c6:47:7d:b7:d5:64:15:ba:29:ff:b3:
bb:73:2c:44:d3:7d:22:89:13:0e:0b:69:03:87:a1:
60:e8:88:4d:61:17:82:36:3f:c3:a9:5d:b6:e3:fe:
cd:9a:00:3e:ae:39:cd:69:b2:3e:0b:ba:29:be:21:
62:c9:0c:07:ca:ac:75:0d:1c:55:56:34:5e:0d:e9:
e8:d3:7b:e5:c2:66:f1:7a:79:07:f9:21:86:f9:8a:
63:0a:b7:ee:7e:86:23:ac:9d:05:71:d8:13:2f:db:
20:66:fc:6e:97:eb:70:71:f6:c4:64:95:cf:52:1f:
99:f3:4c:c0:4e:da:46:ea:c2:39:91:a1:61:15:82:
d7:99:4a:40:c6:e0:f0:52:a4:4e:43:cf:95:c7:45:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:12:FE:27:4D:67:CE:CF:86:99:35:5E:B9:D7:4F:66:F9:B6:AF:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.195.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:e6:a8:0a:f1:a4:60:ab:0c:87:db:66:ab:28:90:94:02:34:
c5:5e:6b:84:90:52:46:0d:33:e3:56:cb:e8:ae:c0:16:52:48:
f3:9c:41:0d:17:42:f7:48:4d:77:31:dc:20:34:47:b4:22:5a:
70:d2:c7:06:28:df:c3:df:ec:a1:44:35:da:45:f0:86:db:cb:
c2:19:58:2f:6b:d5:54:fd:a0:74:66:31:1f:d6:a0:20:c0:b8:
70:f9:08:13:3e:11:b3:7b:44:84:aa:48:9f:95:c2:7a:d2:cc:
d3:c0:62:15:33:b6:64:08:9e:e7:0a:ac:81:0c:5c:58:3d:33:
31:f7:02:85:c8:bc:86:c4:1f:24:9f:6c:f2:fe:5a:cc:cd:44:
75:3d:62:c5:04:c9:b9:33:3d:28:40:bf:ef:e2:e2:43:19:8a:
7b:2b:4d:24:e7:22:45:eb:e1:0b:3b:db:b9:67:12:b9:74:4b:
74:53:aa:17:59:df:da:cb:6c:59:70:06:7c:92:09:7f:02:46:
1c:ee:28:2c:2c:34:af:01:be:3d:9d:73:47:46:6e:88:b6:5f:
1a:4f:7b:03:9b:ca:0e:b6:5a:b2:b5:a5:0c:22:ee:0c:27:bd:
80:77:a3:e4:6c:99:09:81:83:80:ee:4d:97:76:d5:98:14:59:
e4:d1:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:15 2025 by rpki-client