Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa
File: 32366493-a9e8-3a70-86e9-3dbb2976f003.roa (raw, json)
Hash identifier: k+d1aN8MCdORbnS3aIIe/fifLXWCMSApc6U7Ru+JkzQ=
Subject key identifier: D6:6A:FD:A7:F6:EE:DA:9D:8A:73:AF:AA:BD:B2:73:BB:49:1C:17:57
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584898D61EB36135EEAC919DCA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.184.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1e:b3:61:35:ee:ac:91:9d:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=14827c01-2491-4921-8894-b271938d888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:9f:81:c5:68:7c:1a:f2:e6:8c:bb:df:69:
d9:39:4d:2f:9d:00:6b:17:0e:56:01:29:67:38:cb:
c7:33:1f:d5:a6:e7:74:01:3a:43:7b:87:b3:b1:57:
e0:0b:9b:6a:b5:ed:4c:53:f7:0e:56:d9:f5:59:8b:
23:e1:6e:29:9f:0b:13:80:af:c4:4f:72:3d:62:b8:
3e:28:c2:24:01:dc:d0:91:c0:e9:dc:a9:75:28:bd:
0d:9a:c3:0f:6c:2a:46:aa:3f:2d:3e:f0:13:48:97:
e7:57:23:07:67:ff:67:84:59:b9:c5:e7:ff:0a:e4:
41:d1:ba:ed:94:36:c7:13:50:6d:9b:4e:42:1d:00:
b4:74:77:60:c5:7d:0f:2e:9a:1b:06:22:8c:30:04:
ea:1e:c7:c6:09:24:ad:06:59:dc:59:2d:c7:cc:a1:
63:f6:db:2b:54:91:33:1e:83:4b:53:5e:68:21:22:
ac:c5:ab:47:6d:d6:70:1f:08:d4:c6:7f:e8:57:91:
44:22:c0:43:2b:0f:5a:c8:b3:05:af:70:ea:02:37:
aa:18:62:d6:d2:e8:4d:ce:d4:43:c0:17:28:0d:9f:
8b:a4:9a:2a:4b:b0:59:c9:5b:c6:1d:48:be:a3:2c:
d5:a7:4f:a6:99:9e:16:9d:64:e5:69:a5:de:bc:5e:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:FD:A7:F6:EE:DA:9D:8A:73:AF:AA:BD:B2:73:BB:49:1C:17:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.184.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ed:76:da:3d:f2:77:a3:6d:15:46:3e:fd:20:b4:c1:9f:17:
a3:a0:cd:71:dd:f8:d0:ad:d7:46:c6:cb:eb:0b:04:c6:07:dd:
cd:41:e6:fc:a5:79:d2:f0:53:2d:c1:e3:d6:f9:98:54:09:a4:
2c:42:fd:07:5c:cc:fb:c7:13:03:63:a1:37:d5:2e:0b:c9:c6:
ab:4d:c9:d1:b9:b4:99:93:9d:8a:61:15:7c:24:0a:2b:92:a0:
4a:44:2d:43:9f:62:48:99:78:80:c6:5a:4c:95:58:06:bd:1e:
6f:f3:fc:6a:cb:31:be:1b:b3:b5:92:31:31:3a:6e:d1:64:bd:
fe:ca:ca:de:2c:c1:69:1b:c4:32:8f:2c:66:1f:14:e0:e0:b1:
37:e3:96:a8:3b:7d:f6:58:80:3c:8b:8f:41:ae:af:6a:91:5c:
cf:95:ec:7d:8b:71:ae:f6:9a:c3:82:18:b7:2a:cd:5e:92:ae:
b1:01:36:08:a9:bf:83:0a:e3:6c:09:ce:e8:4f:86:74:07:7a:
80:7e:94:46:d4:4e:5a:62:15:77:b8:c7:e9:a6:ee:43:cc:fb:
52:c7:36:e1:3d:2c:a5:d8:43:0e:e0:ae:a8:a0:3a:be:ef:b3:
03:ca:10:61:d1:f2:74:e8:bf:0b:1a:a4:55:92:42:32:09:a4:
59:74:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:42 2025 by rpki-client