Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
File: 0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json)
Hash identifier: jXZJfea0/Krsd387sAaHLi0Bri+tRhp6Ne2gLZuiM5o=
Subject key identifier: 37:D2:DF:9B:41:4E:1B:8D:38:98:11:D8:7A:D8:91:3E:34:C3:EF:50
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F4F8BB3340E0B7EC15156580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7029
IP address blocks: 64.24.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:bb:33:40:e0:b7:ec:15:15:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=a400a6f9-b452-4b0e-b34c-b2c750a04b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:f9:c6:77:03:55:ac:77:0f:72:47:70:07:
b5:23:31:5d:b1:dd:25:e4:0e:a3:4c:cf:ee:71:76:
4b:ce:bf:24:4e:ad:ed:93:ec:75:36:38:76:dc:32:
a0:92:f5:d0:4e:5a:59:af:5f:1b:2f:c3:24:0e:56:
d0:b4:64:14:3e:5d:64:c9:d3:75:7b:2b:4e:3f:e1:
52:bf:e7:2d:63:27:07:63:93:4c:8b:84:16:07:d2:
69:5a:1c:d0:93:65:63:68:64:b2:a3:b5:60:43:f6:
39:79:46:a4:8f:9a:5c:b3:34:60:5d:fb:76:54:b7:
f3:f9:23:22:a1:8c:1d:f0:3e:a8:86:33:f5:0d:3a:
b1:0a:2b:2a:8a:b4:62:fe:1a:7e:62:0b:fd:33:48:
8a:e9:4a:ec:6d:92:5c:9a:74:b1:ca:32:13:0a:61:
cb:ce:d3:ed:e4:a9:e2:cd:a7:98:4e:b0:b8:1d:a9:
1e:87:9b:ee:f2:38:14:37:7d:89:bf:b3:ea:1a:f4:
37:d6:1a:21:bc:bc:71:79:12:41:5d:52:1c:cc:94:
2e:73:6b:d5:8f:2c:39:a4:77:b1:2b:61:b2:42:b8:
fd:2f:37:8d:fc:a3:66:bd:ad:5f:da:7f:97:a2:41:
bb:01:27:e2:dc:16:53:74:e2:59:aa:b7:89:a9:59:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D2:DF:9B:41:4E:1B:8D:38:98:11:D8:7A:D8:91:3E:34:C3:EF:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.24.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:8e:78:72:4f:5f:a2:08:99:53:d0:a8:6c:03:8b:00:b8:7a:
be:eb:33:a5:9a:4a:a5:4b:77:98:f7:d6:a6:56:28:ac:25:fc:
3b:84:83:90:d2:b9:9f:b5:51:59:3f:7c:46:72:8a:7b:12:ce:
ab:4e:4f:88:fb:ab:24:2d:54:03:3c:d9:86:76:bd:c3:da:92:
ae:ed:79:40:24:63:3b:34:83:19:32:07:8b:81:40:f2:e7:04:
a6:3a:06:f4:2b:f7:84:e1:f5:ca:eb:cd:33:7f:a6:51:3a:6b:
7d:8e:2d:ed:9a:4a:52:da:a1:8b:f6:61:84:90:b8:96:fb:c1:
a2:0d:c1:82:0c:43:aa:c9:24:c2:cc:2d:34:c6:87:94:f0:41:
27:94:c3:7f:54:e2:6d:03:63:81:70:b1:08:39:95:ac:82:5b:
89:03:ec:50:0a:7d:76:c2:4c:40:cf:8c:65:d9:80:4b:68:a2:
17:ed:ec:cc:63:a2:f4:f5:9c:57:b1:b6:0c:b2:b5:b4:02:01:
78:16:d0:56:0d:eb:14:a9:75:cb:81:07:91:d3:9f:97:b1:39:
f7:a3:6c:c1:09:06:38:33:90:1b:2d:1f:86:58:7b:f1:6b:ca:
ea:f7:52:cf:c8:d2:00:13:20:3b:b4:ba:8b:bf:45:f9:41:fb:
be:14:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:57 2025 by rpki-client