Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ebb11f8-b30f-3b43-a148-aafef00b7b57.roa
File: 0ebb11f8-b30f-3b43-a148-aafef00b7b57.roa (raw, json)
Hash identifier: me4rIXP8C9jdfH2XYYG53IAiAH8SC6XnR0wEw+zUIFM=
Subject key identifier: BC:30:D1:1C:F8:72:9D:E1:9E:BF:F9:E9:0D:D6:92:2E:5A:1F:76:95
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21121595873E9A2AA5374E8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ebb11f8-b30f-3b43-a148-aafef00b7b57.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 108.59.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:21:59:58:73:e9:a2:aa:53:74:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=29b9ba50-f52f-4def-b5a5-e324d577a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:02:17:ee:a3:62:bd:a8:39:61:d5:b2:09:
e7:20:db:fc:69:99:a8:df:8a:a4:7a:87:f6:02:a7:
17:5e:57:f4:53:07:d4:72:11:fa:a0:5b:65:5f:93:
d8:23:e0:77:bc:b4:5c:d2:1a:b9:64:f7:44:a5:01:
e3:30:88:13:7f:ab:80:06:df:3f:7d:3f:f5:c3:88:
18:69:09:95:9e:19:4a:3e:2b:a1:2c:28:db:12:33:
d1:ad:0e:3c:57:a9:90:5d:ab:78:b8:78:e4:b2:52:
54:3f:16:48:80:77:71:4a:ee:6f:dd:7a:87:b1:2e:
ae:19:4e:b8:2a:e5:57:fa:f7:03:15:fb:5f:90:40:
fe:c8:29:d8:fb:42:bc:07:7f:de:ba:17:de:9d:73:
0e:71:37:d5:19:90:d2:ed:56:f9:2d:cd:d3:46:f0:
68:b4:bf:fe:ac:2e:87:aa:72:a6:dd:a3:ee:56:c4:
51:ec:62:ff:e2:c9:1d:18:2b:d7:d8:0a:4f:b4:77:
7c:ce:23:db:9b:a0:2f:83:77:18:46:c8:29:98:84:
f9:16:56:3f:0c:57:86:7d:ba:19:d9:9c:be:f4:b2:
f4:56:eb:5a:d0:da:41:4e:1a:78:f1:79:ce:b0:dc:
c7:8c:4a:e8:7c:c9:2c:67:44:7b:de:4a:70:11:9c:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:D1:1C:F8:72:9D:E1:9E:BF:F9:E9:0D:D6:92:2E:5A:1F:76:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ebb11f8-b30f-3b43-a148-aafef00b7b57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:7a:5e:d3:fc:a9:f8:de:a1:9a:a6:aa:cf:d8:8e:be:16:5a:
7c:a5:29:46:75:eb:c0:4e:2b:57:e6:4a:c2:db:93:d2:dc:52:
2d:4d:00:0e:84:1f:91:ee:f9:e3:e1:bf:15:f1:ff:07:56:ca:
3e:b0:2e:8f:f4:83:c6:74:a1:ff:c0:09:4d:aa:7f:51:f8:b7:
58:aa:6f:c2:7e:b4:77:6b:c4:7e:21:f7:7c:d1:c6:96:52:42:
91:47:aa:cb:46:28:4b:03:e9:03:d9:99:29:95:48:f2:46:d0:
b8:2f:54:35:40:63:9b:57:4a:b6:70:f7:bc:77:95:fe:29:55:
ef:db:b0:7c:5e:85:df:10:27:df:d8:87:c4:cc:30:d7:5f:b1:
ce:d2:bf:77:f1:be:34:ad:10:ee:b7:d5:2b:36:c6:58:b1:cb:
dc:33:c3:71:1d:0e:79:b5:55:44:e2:69:a8:e0:7b:f2:49:08:
42:61:04:47:23:a7:ab:db:93:2c:0d:a8:2d:4c:70:d9:36:c2:
50:09:97:0f:93:b7:c2:df:27:8e:48:6f:ea:f5:4b:88:a4:36:
29:fd:2a:4f:bf:e4:85:cc:a0:9a:41:11:28:af:e1:0d:22:91:
3b:24:4a:80:61:f8:8b:c1:3c:fa:f7:88:01:70:b3:87:88:5a:
9d:ae:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:14 2025 by rpki-client