Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b9e0756-ccb4-3362-8856-0507ef44f241.roa
File: 2b9e0756-ccb4-3362-8856-0507ef44f241.roa (raw, json)
Hash identifier: eEo05oR9fJ6znrTW+dfp5jP5vfook1TvcLE5PSp7NOs=
Subject key identifier: F7:02:92:EE:A5:E3:08:CA:2C:52:B9:41:82:13:34:5E:43:DE:80:A5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21118149A80DF8897B9AF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b9e0756-ccb4-3362-8856-0507ef44f241.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 40.142.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:18:14:9a:80:df:88:97:b9:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=6ba26299-6692-4cfe-bf3c-c81c0346321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:63:b3:bc:f6:73:df:e0:19:14:78:b5:14:
af:fb:94:45:d0:03:63:55:af:9c:a4:ea:d2:92:c0:
40:05:ad:85:ae:68:25:51:b5:8b:73:f6:96:83:06:
c9:61:44:a9:ee:df:e0:59:7b:87:c0:7a:83:a0:de:
b8:ca:75:fc:38:a7:b5:bf:7c:60:e2:64:c1:e5:15:
60:60:9d:c9:83:ac:86:56:28:9f:13:37:17:41:1e:
ac:77:e9:1e:1a:d5:59:89:d7:97:fd:cb:0d:36:54:
27:ff:2d:d9:6b:f7:a5:94:a1:23:97:16:7a:2d:ba:
db:e0:58:d0:32:db:b1:e0:38:b1:b6:63:3b:4b:e1:
5a:60:d0:f4:c5:b5:31:10:c0:d2:86:60:30:b5:b4:
f5:9d:4d:60:2d:ef:82:aa:85:64:7a:7d:e9:09:2f:
81:f7:1c:c9:9a:b6:c1:7b:83:05:cb:6c:c1:74:57:
31:5d:f3:89:54:c1:09:ac:87:26:56:3e:fb:7c:ec:
fd:e6:bb:72:0c:71:ac:0e:60:19:bf:60:23:03:5b:
e6:60:b4:4d:7f:81:69:2e:a8:30:63:b7:02:2b:ad:
4c:58:72:d4:2c:79:35:86:59:d4:6f:41:8c:9a:91:
27:bb:8e:bc:cd:40:ce:0c:cf:a0:1e:4f:00:7f:a1:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:92:EE:A5:E3:08:CA:2C:52:B9:41:82:13:34:5E:43:DE:80:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b9e0756-ccb4-3362-8856-0507ef44f241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:f0:17:72:d3:4c:dd:5a:e3:d2:3f:a5:96:aa:b6:63:ac:4e:
d9:41:1b:22:e9:af:84:5e:28:60:8b:83:93:b1:78:71:d0:af:
1b:fd:0d:1c:26:12:b9:b0:04:7d:86:e4:61:2e:53:32:ff:32:
1b:e6:4b:7d:c5:28:f2:ee:d6:86:b9:45:6e:2b:5d:02:81:73:
22:53:19:6b:f4:bd:18:3e:47:ff:78:1e:90:25:36:6c:0b:1a:
63:74:f1:3b:b3:8f:24:c9:e6:24:a9:93:37:e1:1a:09:4e:a5:
a0:c9:0a:8c:8b:e2:3a:a4:40:b6:62:ef:04:c1:2b:c9:b0:c4:
22:83:7a:82:9e:25:96:f2:1f:62:42:2f:7f:18:b4:05:ed:31:
6d:3e:b0:5d:fb:fc:7c:d9:45:9a:cc:df:eb:3c:cd:d6:22:75:
c0:24:5d:25:0e:ce:48:90:fe:c3:46:03:2c:21:dd:d3:25:49:
33:1d:44:c1:32:88:1b:7d:42:96:70:cd:da:6e:a4:28:d6:10:
a1:db:c4:82:8f:85:b4:a9:0c:c8:6a:34:70:fe:36:69:15:f4:
c5:be:25:e0:98:d5:8a:5b:1b:06:c5:74:2e:ee:96:a3:2e:95:
3f:bc:44:f2:85:31:29:db:6c:a8:fa:73:63:21:9a:5f:51:9a:
42:46:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:14 2025 by rpki-client