Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/200d9a9b-0846-30a4-8253-1dd85850a2ec.roa
File: 200d9a9b-0846-30a4-8253-1dd85850a2ec.roa (raw, json)
Hash identifier: XapUWoGEBEioxmDschLZUUe6P1AEfpIPtoHGPfB6xF4=
Subject key identifier: 96:CE:15:D5:A9:79:96:0C:A0:76:87:13:F0:5F:24:E4:AE:94:92:11
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858480273CEB1E9E305E96461E080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/200d9a9b-0846-30a4-8253-1dd85850a2ec.roa
Signing time: Tue 26 Nov 2024 17:11:50 +0000
ROA not before: Tue 26 Nov 2024 17:11:50 +0000
ROA not after: Mon 24 Feb 2025 17:11:50 +0000
asID: 3685
IP address blocks: 209.96.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:73:ce:b1:e9:e3:05:e9:64:61:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 17:11:50 2024 GMT
Not After : Feb 24 17:11:50 2025 GMT
Subject: CN=476a032c-7b4a-4dff-b5e6-57d00697042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:34:6b:f6:b5:91:29:ca:f6:7a:22:6f:05:
f5:2b:8a:d4:74:f1:24:5c:98:20:0b:61:ab:82:8a:
0d:b5:d0:31:5f:e9:3d:b8:09:af:92:2e:d0:38:6a:
9c:40:82:92:a7:6e:e1:91:4f:c9:05:54:09:1f:b8:
23:45:77:11:35:de:f2:a3:0b:b0:7b:05:d8:24:a9:
c4:1d:32:be:c9:45:5a:42:b7:1f:44:75:01:f5:65:
26:98:f4:d7:80:27:ac:a4:cb:d0:7c:d8:9f:11:c8:
c7:5e:47:62:13:78:b6:1d:de:7c:5d:6d:f5:51:70:
0f:12:1e:40:03:57:87:b8:36:aa:6a:0b:2d:05:93:
a9:4d:be:43:f3:5b:86:7b:a1:5e:b0:dc:e4:14:9d:
aa:da:b0:9e:92:46:b3:db:bc:ad:51:45:71:8d:24:
ad:64:e4:6a:d6:3d:c6:e6:54:f6:29:12:58:db:e5:
bb:6a:72:d3:76:bf:6c:5d:fa:03:21:84:95:96:5a:
f9:fd:63:3b:a2:2d:28:21:5c:05:fa:52:fa:18:81:
01:0e:c9:d1:57:88:4f:b1:e8:57:6f:1f:88:05:12:
2f:b9:41:02:52:f0:dd:72:a5:3b:c6:0f:e8:ce:5e:
74:2b:ef:17:fa:01:74:c4:00:13:30:32:ed:89:1a:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:15:D5:A9:79:96:0C:A0:76:87:13:F0:5F:24:E4:AE:94:92:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/200d9a9b-0846-30a4-8253-1dd85850a2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.96.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a6:7f:64:c2:d5:c5:a8:a1:88:0a:cc:c2:e9:e9:7d:79:0e:
31:fe:c5:58:63:e3:86:5c:00:07:ca:e6:f2:c8:0b:17:d2:2d:
19:ae:d9:56:05:8a:1d:8e:c7:de:c1:e1:f1:db:7a:29:81:3f:
7a:be:92:9b:c0:53:ea:9d:0c:35:7e:ab:3c:63:49:d0:d4:a5:
38:cd:89:83:17:3d:19:4a:c8:4a:96:37:84:a1:e6:c5:1d:8d:
54:92:0f:b0:68:01:2c:8c:61:78:e3:b8:cc:28:8d:14:e9:4f:
af:68:cb:ae:70:4b:ef:7a:a4:f3:96:45:32:32:4f:b5:82:53:
8d:d0:45:2e:40:99:07:7c:06:33:db:32:0b:65:cd:26:81:98:
f0:db:f0:38:c9:f5:13:8a:77:2b:1f:d4:0f:b5:be:18:fe:58:
02:96:a0:30:dd:51:49:cb:44:b7:13:10:ec:aa:83:2f:79:57:
b7:29:84:2f:85:78:fd:41:eb:95:04:42:4c:20:68:a7:7f:5d:
9b:b2:6b:61:c0:1b:29:16:37:a2:64:75:3c:97:d2:d0:ea:f6:
32:de:5e:0a:d4:83:63:7d:41:8a:1a:08:55:ef:a5:35:e0:96:
99:6b:72:c2:15:99:db:24:35:a1:3e:ff:ae:91:0d:c9:f3:f3:
cb:cb:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:45 2025 by rpki-client