Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e96886d-e7d6-3a7e-8e03-54606af5df3b.roa
File: 2e96886d-e7d6-3a7e-8e03-54606af5df3b.roa (raw, json)
Hash identifier: JT6SoEDVchKe0uDyx5fkqowwpxxdfNQ/ptffUwJjUmQ=
Subject key identifier: E9:57:19:EC:25:A6:31:31:CA:BB:7C:27:83:48:61:E2:7A:E3:3A:47
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584472CDFB443C1F210B20C81480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e96886d-e7d6-3a7e-8e03-54606af5df3b.roa
Signing time: Fri 05 Jan 2024 03:56:19 +0000
ROA not before: Fri 05 Jan 2024 03:56:19 +0000
ROA not after: Thu 04 Apr 2024 02:56:19 +0000
asID: 7029
IP address blocks: 71.29.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:cd:fb:44:3c:1f:21:0b:20:c8:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 5 03:56:19 2024 GMT
Not After : Apr 4 02:56:19 2024 GMT
Subject: CN=452c8bfc-43df-4581-8c4b-fd648771e6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:ad:e8:fc:44:f2:c6:83:ed:96:4f:0b:e9:
76:b2:72:eb:a7:fc:e4:9d:e0:de:c4:73:7a:a2:6e:
4d:4e:81:7c:ed:69:5d:4c:e5:5a:52:a4:0a:dd:00:
e0:96:69:b8:0d:a5:e2:4e:f7:3d:98:17:45:ba:f2:
87:fd:17:99:b4:42:ff:65:d8:23:c1:7d:44:63:c5:
aa:3f:ea:fd:69:64:5d:1c:53:8a:70:10:0c:96:58:
52:33:ab:a0:c5:b2:79:01:fe:bd:83:5c:54:38:ca:
3b:42:92:12:91:d9:28:2d:98:50:f7:d2:eb:00:14:
ac:c4:18:cf:f7:00:16:ea:be:5a:f4:57:30:6a:d0:
3f:07:e4:a6:e5:99:ca:30:06:d4:43:93:c9:63:b3:
0b:48:6d:33:f9:16:b3:da:1d:a2:ec:6e:7e:ea:0e:
2f:bb:63:32:62:69:00:32:bc:e5:10:c1:cb:8a:8f:
82:c0:83:2c:b7:7c:e2:0e:10:5e:d8:7c:30:90:df:
06:d8:a6:f5:92:21:61:bd:16:b0:26:a2:19:86:13:
49:f4:90:c2:22:d2:40:6d:71:f8:08:e0:7e:c6:9a:
42:0b:6a:f6:59:ef:ac:9a:b0:47:92:01:36:c2:6e:
b7:76:4b:80:73:3e:3f:5a:3c:f8:1b:44:0c:e6:87:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:19:EC:25:A6:31:31:CA:BB:7C:27:83:48:61:E2:7A:E3:3A:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e96886d-e7d6-3a7e-8e03-54606af5df3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:37:56:c0:f5:56:42:c9:7f:d7:a5:ce:d2:e2:01:d9:0e:44:
76:76:86:02:66:04:30:f2:a6:ba:18:ac:9a:80:99:94:b4:ed:
b0:40:bf:4d:6d:04:7e:29:e3:ef:d8:f7:f4:92:53:eb:29:4c:
c4:fc:e1:b2:f1:14:4a:f1:e8:00:08:88:b9:77:0f:ad:76:34:
08:c4:17:63:f5:e9:a8:f7:a1:56:b3:b0:5f:12:41:dd:bc:91:
12:ca:b3:69:8e:7b:50:de:ba:86:51:ff:81:e6:31:f1:b6:ad:
2a:22:81:29:f9:34:13:d5:fb:89:67:d0:38:50:d2:fd:a6:0a:
d1:2f:73:e5:47:de:56:78:6a:04:31:21:83:3a:55:34:30:0a:
44:a7:81:30:37:e9:fc:90:bd:51:d2:30:80:04:ad:0a:b6:65:
28:b7:e6:ee:c9:dc:a7:d0:0a:e1:0a:db:45:ae:c7:82:d5:84:
0e:f5:e8:2d:08:56:c7:02:f3:37:f9:8d:99:56:5b:08:79:d1:
11:92:0d:d6:f0:c4:00:bc:30:db:44:34:1e:d3:b0:f9:fb:fb:
7e:50:3c:65:f4:0e:1b:e4:fb:74:25:1b:91:2f:94:d6:d5:1f:
7f:33:99:4b:05:10:cb:66:51:2d:1d:34:cd:1f:ed:3a:58:76:
77:eb:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:37 2025 by rpki-client