Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31ed1ee8-2228-38be-a096-f89a7589a7e7.roa
File: 31ed1ee8-2228-38be-a096-f89a7589a7e7.roa (raw, json)
Hash identifier: v8DY8qX08a6mdBQBhzGosR02M5WzKwTQ6h0E0IHeKFI=
Subject key identifier: 3B:0C:1A:22:1C:5B:BC:C0:53:96:44:84:BA:1A:6A:90:AC:93:A8:19
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332E131769391E51013D080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31ed1ee8-2228-38be-a096-f89a7589a7e7.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 65.48.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:e1:31:76:93:91:e5:10:13:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=93bdffef-4cb7-45bb-936c-1bb52a624be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:64:f4:ba:fd:c8:15:57:a2:71:cf:ab:6f:
01:c7:52:d1:92:41:4b:b7:52:96:f3:06:8b:3e:7c:
26:88:ea:8e:e5:80:29:60:c4:f0:6b:bf:fc:80:69:
b6:25:9d:24:34:3e:3e:ec:f3:0c:ac:c5:e7:2a:48:
20:4e:73:f1:69:2e:88:b6:50:4f:40:ed:d6:34:f6:
9e:c4:90:d1:0a:c7:98:5a:2a:d2:05:69:81:77:15:
14:75:74:84:a7:d4:6f:e3:67:a3:4a:7b:d7:98:76:
b6:96:e7:e7:76:4d:fb:ac:76:d1:e0:b0:f3:12:34:
49:52:45:44:26:d1:aa:4b:f3:84:20:2f:8b:77:22:
12:13:ec:c3:31:fc:42:5c:56:37:7c:ba:0c:cf:92:
84:e5:4a:50:3b:c7:b4:3a:8d:49:74:4f:fb:11:2c:
96:85:64:cb:5c:4a:96:ed:05:de:0c:79:6b:fd:41:
82:0a:59:bf:f6:49:81:d6:84:88:40:e5:81:39:75:
6c:45:18:59:0d:46:0c:1e:84:9f:5f:97:6e:fa:4b:
44:26:65:88:c0:fc:e7:a8:6b:0e:f7:71:23:0b:d3:
8b:01:3e:d9:1b:15:c1:e2:64:d6:09:10:79:07:0d:
bf:91:b8:53:61:20:6f:6c:f0:d5:3c:d7:db:ad:39:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:1A:22:1C:5B:BC:C0:53:96:44:84:BA:1A:6A:90:AC:93:A8:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31ed1ee8-2228-38be-a096-f89a7589a7e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.48.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:bd:58:d9:9e:77:d6:af:9f:84:81:9f:03:67:b7:e1:8c:01:
2b:7c:c0:f8:8c:f6:f5:5b:13:28:0d:7f:6e:68:e7:18:06:6f:
23:47:7a:d9:8f:c5:35:3b:f0:a8:d3:84:8f:be:29:48:9a:d9:
1b:22:53:10:6b:be:f5:f0:ac:9d:92:20:68:92:64:fa:5d:b0:
7f:38:0b:0c:b0:8d:18:dc:06:1c:20:9d:aa:b4:ea:86:47:79:
7d:60:ad:48:65:5e:03:e2:09:93:e8:61:ce:8a:bc:63:f3:aa:
21:df:98:16:ad:5f:c3:80:08:5c:0e:8d:4d:fa:6d:8d:03:39:
15:e6:0f:bc:02:d8:7b:03:e6:b9:a7:d4:1a:68:d2:e0:d4:f5:
fd:49:99:2b:5b:ef:d0:16:b6:8f:6f:71:da:64:e4:6e:db:43:
0d:fe:10:af:d8:79:e9:c3:1f:a2:41:63:58:ba:18:21:22:59:
db:e0:64:52:a6:89:ea:cd:90:05:1d:aa:10:a9:63:d3:64:f3:
00:f5:16:4a:04:d5:ad:25:9c:fd:1e:c7:76:96:79:70:d7:eb:
90:82:8d:b8:6f:07:ba:66:2f:67:99:df:4a:fd:1d:71:60:5a:
32:9c:a5:4e:e3:f0:96:6a:82:de:d9:b3:f6:b0:2a:85:df:1f:
b6:45:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:39 2025 by rpki-client