Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c93bdd-453c-37de-8bd1-5b6f9fa8a9b8.roa
File: 39c93bdd-453c-37de-8bd1-5b6f9fa8a9b8.roa (raw, json)
Hash identifier: iwzpap9shiNoATeg0cScuaDwURndcvfgreSscqOiZSE=
Subject key identifier: 4A:63:92:EC:1A:40:67:B2:4B:A4:67:F4:12:F4:ED:8C:BF:22:5C:75
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA1F57B9588A3BF9488900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c93bdd-453c-37de-8bd1-5b6f9fa8a9b8.roa
Signing time: Thu 20 Feb 2025 18:15:17 +0000
ROA not before: Thu 20 Feb 2025 18:15:17 +0000
ROA not after: Wed 21 May 2025 17:15:17 +0000
asID: 7029
IP address blocks: 67.140.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:1f:57:b9:58:8a:3b:f9:48:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:17 2025 GMT
Not After : May 21 17:15:17 2025 GMT
Subject: CN=70ac0f44-50f2-47ec-ad37-7750739b42bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:0f:a3:ba:e8:e9:6b:bf:cf:45:a5:02:d1:
fb:13:0a:72:1b:5f:51:2c:67:8a:12:07:fa:89:36:
98:8d:ef:7b:75:2d:f2:34:9c:0b:bf:4b:2b:b7:b7:
ef:5f:37:7f:5b:84:4f:38:ee:b2:f4:db:bf:46:18:
27:04:1f:ab:ac:3c:e2:14:39:d0:bb:6c:7a:5b:3e:
b9:51:ba:b8:62:90:c5:27:04:8b:1e:76:ed:95:c7:
a3:f3:11:5b:5a:cc:f5:b8:0f:89:04:52:aa:f2:08:
80:69:eb:02:fe:93:81:19:cd:3d:4b:8e:e6:c0:af:
b0:7c:e3:f8:83:dc:fc:be:ef:cb:ae:0e:87:65:c5:
63:78:79:15:02:25:fd:77:03:a0:26:c9:f9:d3:94:
be:de:06:65:d1:69:b9:70:1c:62:bb:ee:da:ac:72:
c3:18:b8:cf:15:30:49:86:33:da:7c:83:7f:3b:20:
5d:a3:f5:66:80:6e:f1:a2:b9:10:a1:e2:94:c8:43:
0c:91:bf:db:83:0b:c4:9b:63:e3:a3:14:2d:4a:de:
cd:aa:26:72:d2:eb:8d:55:ce:7a:a6:9f:39:d1:ee:
87:34:75:82:11:c2:5e:5c:50:ef:96:cd:b7:3d:52:
a0:0f:4a:d9:7d:09:e5:52:f4:22:9c:7d:45:01:c7:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:92:EC:1A:40:67:B2:4B:A4:67:F4:12:F4:ED:8C:BF:22:5C:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c93bdd-453c-37de-8bd1-5b6f9fa8a9b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:3c:5a:2f:29:e0:09:b7:f8:17:98:8e:41:90:82:fe:87:f0:
22:64:67:14:ed:4d:16:b7:44:4c:5d:fc:35:a5:1c:19:d3:d8:
56:32:c5:a3:39:05:c9:a9:07:4a:e1:af:16:b4:c8:b7:39:ed:
a3:09:7a:b1:5a:ef:73:68:9b:ba:18:ae:aa:ce:6f:1b:ed:4e:
da:ea:3b:30:20:f8:b3:de:bf:0d:3c:a4:cd:9a:c5:55:ac:d6:
fb:a3:91:78:ad:7d:05:46:79:67:ce:9c:15:ca:69:6e:34:f2:
c6:ce:4f:39:b0:12:89:54:90:a1:9d:77:fc:b3:08:71:08:62:
57:f5:31:bf:29:5b:02:86:4b:32:a5:cd:3e:5d:ea:99:3f:f4:
a6:7e:fd:56:23:c0:30:1e:b1:51:96:c6:46:be:5d:2e:18:0a:
fd:e8:f3:6a:60:c8:af:3e:6c:71:70:eb:e3:70:d4:6f:ef:4b:
c8:ad:ae:47:8d:3f:16:be:1e:32:80:40:5b:f6:62:2a:f6:10:
c1:6e:2f:05:2e:d1:40:71:f9:15:ad:38:1e:53:da:76:d8:b4:
7e:26:aa:7e:cd:17:6d:d3:b3:61:88:f3:51:70:42:0a:be:bc:
98:e8:24:08:b7:07:68:a3:13:b7:d9:59:0d:ee:07:b0:58:d5:
c0:c5:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:55 2025 by rpki-client