Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa
File: 1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa (raw, json)
Hash identifier: 4FMOdDfqUsVEsSPzXSC7oDGdaDxp9HLzuwIo7crbjR4=
Subject key identifier: CD:47:69:1D:8C:11:3F:92:18:D2:17:B4:5D:54:9E:8B:F7:44:E0:45
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584898D61F67E09D12CCDC1A29E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.186.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1f:67:e0:9d:12:cc:dc:1a:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=21bd9975-95bf-46b6-b40c-b302f8dc1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:b2:9f:75:60:90:7b:c7:88:8a:6d:8e:36:
db:b4:7c:31:1c:ad:f5:8e:80:9f:f5:d1:80:3d:8c:
a8:2a:61:21:61:f1:9c:b5:1e:ac:07:22:dd:89:b1:
4d:ea:16:87:6b:35:71:c3:f2:0a:0b:6a:6c:de:0f:
88:46:d4:54:c1:04:1c:79:cb:55:87:ed:bd:8c:4a:
12:ec:2d:e5:8e:75:49:5e:c7:72:84:91:d9:96:e0:
bd:7f:61:74:b7:90:4e:c0:c0:aa:d2:b7:d4:51:4e:
ab:05:80:97:c3:aa:89:0f:2e:82:9d:24:26:b8:da:
53:42:6f:be:8a:c9:d7:72:cf:99:90:5b:0d:10:ad:
b5:5c:18:44:04:24:a7:78:6b:2e:48:25:40:44:bc:
ba:5d:30:e2:0c:b4:e7:1a:2f:0e:f6:d1:b5:7a:39:
6b:6a:26:18:24:99:de:76:64:cd:43:dc:fa:2f:98:
e8:53:82:ab:b8:e1:54:f5:d1:06:f6:71:29:19:39:
e0:a8:dc:a4:0c:33:3d:e1:37:92:5b:f3:ad:c1:0a:
fd:5e:ec:04:d9:6e:34:9a:ad:6a:d1:20:03:70:80:
13:e6:15:33:45:b6:11:1d:30:96:16:8c:60:d7:2e:
7d:6f:9a:d8:56:dd:84:b7:1a:ac:61:d5:52:5d:08:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:69:1D:8C:11:3F:92:18:D2:17:B4:5D:54:9E:8B:F7:44:E0:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ef:54:f8:b9:9c:71:18:15:4b:e4:79:ef:1a:8d:da:40:2e:
ff:64:58:ef:5b:c1:cd:6c:44:d7:69:9e:a7:0f:f2:2e:5e:65:
0e:d2:f0:6c:ae:03:16:49:ba:1c:43:17:a8:fd:fd:1e:a0:8e:
13:de:8e:82:c5:20:f2:28:12:a8:a4:f5:e2:4f:44:1a:df:5f:
e1:4e:75:dc:6b:c5:dc:f3:95:3f:1b:e5:f9:a3:93:15:0d:7a:
3e:f7:0a:8e:d8:7f:5f:83:cf:e3:89:7d:8b:1f:2e:22:bd:b8:
f9:52:ee:69:37:c0:18:8f:e7:3a:be:2d:21:0b:15:e6:fb:18:
f1:15:21:40:3e:fa:6a:50:b8:2d:b8:66:21:de:dd:b2:8c:36:
83:e6:42:4d:e9:42:21:78:ac:6d:21:15:4c:e3:ec:7d:0d:b8:
9f:92:e2:d5:8c:bd:34:c6:4f:00:e9:40:b6:4f:3d:57:6f:ac:
73:40:ef:4a:37:6c:54:bf:3e:3b:4c:8e:b9:45:f7:ec:7b:fa:
45:4d:a8:80:45:90:c2:63:aa:ce:82:78:42:e7:53:ca:8f:36:
eb:f7:a0:5b:e7:22:86:c3:9f:06:ea:1e:f4:b9:19:63:e7:b7:
c9:9b:e9:f4:e2:f2:aa:ee:90:37:b5:0a:07:be:18:59:48:18:
04:7b:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:53 2025 by rpki-client