Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a32a36e-367b-3134-bda1-a892924764c5.roa
File: 3a32a36e-367b-3134-bda1-a892924764c5.roa (raw, json)
Hash identifier: w6a9HJQZCSqsPBxguTz6c9A9ZdXWc4aqkfvxCTKYNHI=
Subject key identifier: 79:93:AA:AB:F8:F9:B0:4A:C8:42:7B:7C:D5:FF:24:F7:8B:EE:56:82
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0AE69B6D068DE90C0BD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a32a36e-367b-3134-bda1-a892924764c5.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 216.216.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:ae:69:b6:d0:68:de:90:c0:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=b74c3fdc-0a6d-41d4-9f20-0d9b559669ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:af:21:96:b6:b7:6f:32:21:86:4e:c2:5c:
67:f6:73:8a:e6:ee:56:61:5c:77:3a:26:d7:f2:d8:
28:be:dd:22:2a:65:4a:73:18:71:02:33:31:d1:cb:
a2:98:89:1e:a3:54:2f:75:fd:f4:1f:b6:d2:67:d9:
ca:e4:b3:32:51:69:7a:cc:5e:f1:c9:b5:4b:57:b9:
69:69:f8:2e:2a:f3:bc:da:8e:57:41:ef:65:18:e2:
98:7d:ac:ce:78:bb:ea:79:ae:08:2d:c7:ab:b0:3e:
32:f3:b8:14:46:96:6a:2e:38:0c:e8:91:f4:b0:2a:
c9:35:52:ef:18:55:b8:1d:23:ae:61:8b:29:8c:c3:
b9:b8:99:6d:dd:73:c8:9e:97:12:cd:a5:9b:64:16:
b3:b1:bb:ea:4b:46:b6:c1:89:c8:f6:c9:3e:36:03:
ca:ba:8f:e7:47:97:5e:e5:0b:bf:58:cd:ac:e1:cf:
0e:45:6a:83:cd:2f:98:80:23:cc:df:30:41:e9:24:
4d:3f:55:b8:d5:b6:a7:fa:a4:6a:ea:f7:2d:b5:41:
36:f1:bd:2c:5f:6c:ff:a1:45:9b:89:d8:8d:1c:2b:
88:f0:1f:e1:a7:f5:3a:5e:af:4b:3a:c9:18:75:f0:
e8:b3:bc:8c:db:94:0b:16:f6:fc:35:70:06:7d:1b:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:AA:AB:F8:F9:B0:4A:C8:42:7B:7C:D5:FF:24:F7:8B:EE:56:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a32a36e-367b-3134-bda1-a892924764c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.216.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:97:fc:1b:21:83:da:30:dc:0c:86:1c:98:31:57:1c:22:d6:
09:0a:22:38:3a:e7:ca:05:d0:9c:a9:63:25:8a:31:d2:1b:9f:
d6:5b:c8:2a:34:ec:ba:e1:ba:3b:c6:29:fd:48:bd:d3:b9:42:
27:c0:a3:b0:13:38:39:5f:56:82:e9:46:09:2e:53:fa:c9:e6:
be:43:d5:8a:21:b0:09:37:f9:30:27:96:75:52:a0:67:49:19:
cb:11:a9:1c:0b:33:25:89:4b:34:87:be:c8:d7:cf:7d:e1:06:
3c:07:8a:bf:d5:43:71:74:3c:03:f6:3a:7d:39:bf:b9:51:54:
f0:d6:f6:0c:f0:77:00:a3:34:a0:9f:49:65:b2:f8:33:eb:64:
60:e9:44:9e:cb:68:80:83:fe:57:32:d4:d0:c2:57:f4:ae:b1:
aa:35:4c:28:81:e8:bf:e4:97:85:bc:10:ef:f1:5c:9e:68:55:
26:b4:06:ad:4e:ad:50:6c:f9:ce:0d:16:ab:e9:b0:45:00:c4:
c9:6b:16:aa:37:ae:f7:14:96:9d:da:3d:37:59:56:5e:f3:66:
15:ec:10:5f:a9:dc:b9:43:65:22:cc:e0:2b:73:85:31:5f:36:
3e:0b:bd:fb:63:eb:06:89:a5:45:39:ba:e8:34:ef:d6:8f:9f:
f8:01:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:25 2025 by rpki-client