Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
File: 3b5d48c6-351c-3660-9ca3-dee164df588d.roa (raw, json)
Hash identifier: IfDspD2ZRmp8Xj1ynPuboxCHRH8+W3XAdd31+waSr20=
Subject key identifier: 4F:4A:63:46:EB:0C:B7:EC:09:48:A4:4C:92:C9:7C:E5:46:2D:E7:C0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2A9DF18F61B33B26FDE3D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
Signing time: Thu 20 Feb 2025 18:14:47 +0000
ROA not before: Thu 20 Feb 2025 18:14:47 +0000
ROA not after: Wed 21 May 2025 17:14:47 +0000
asID: 7029
IP address blocks: 50.96.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:a9:df:18:f6:1b:33:b2:6f:de:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:14:47 2025 GMT
Not After : May 21 17:14:47 2025 GMT
Subject: CN=80b2ab37-7df9-4f44-9f09-eca79694dda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:09:c2:20:b2:9b:4a:b3:29:b6:3e:f5:3d:
0f:da:44:bb:55:75:71:91:63:4e:07:c7:5e:d7:5f:
ae:fd:cf:27:db:31:7c:f5:06:24:a7:a8:37:c4:b8:
91:09:b3:24:0e:06:bb:72:da:d1:de:cc:b1:88:36:
05:7d:7f:fd:39:ef:83:73:3e:4a:c3:9e:18:42:c3:
cf:cb:dc:a5:7b:2c:68:4e:2f:27:04:01:6e:5b:8b:
cb:c5:7e:e0:5f:1f:fd:bf:9e:cb:f3:dc:d7:d3:f4:
0a:e0:94:68:b3:22:06:dc:49:55:44:c1:21:64:dd:
80:3a:d3:f0:58:0b:60:bc:62:00:51:8b:3a:33:e7:
79:d4:c3:18:82:d0:48:a7:03:77:8f:8f:b5:ae:da:
70:c9:03:3e:51:60:38:35:cf:5e:00:e9:fa:37:29:
17:e7:85:9b:0c:15:b0:14:d7:ab:7d:00:d9:f5:3c:
6f:ad:e8:5e:13:8a:9b:c9:d6:b4:5d:53:71:be:22:
6f:78:11:43:7e:cf:5d:74:af:0e:34:d5:08:b4:20:
37:e9:28:48:2f:84:f1:1b:33:37:d5:3e:ee:c2:d8:
f2:80:1f:91:38:34:2d:22:c3:71:02:7a:0f:68:a8:
83:79:f9:44:4d:08:a3:bb:cd:1a:bd:54:23:78:44:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:63:46:EB:0C:B7:EC:09:48:A4:4C:92:C9:7C:E5:46:2D:E7:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:fe:94:d7:77:d1:a5:11:f7:9b:7f:fc:b2:0d:2c:e9:13:ab:
9e:23:64:94:c1:b9:35:9e:c5:2c:0f:70:20:79:10:98:a0:29:
22:07:a3:24:c4:a4:70:71:f3:c7:ae:99:de:1f:f6:46:db:c3:
ad:66:a8:67:d4:12:c2:69:2c:4b:8f:d0:cb:f7:7e:45:8b:e6:
47:47:c4:78:2e:e5:29:fb:7b:42:42:12:ad:66:36:54:d1:80:
dd:a7:ca:24:82:d9:92:f4:99:79:b8:86:3f:a3:8e:2f:f2:07:
23:c2:58:6e:01:80:42:d8:cf:90:1d:8e:7b:fc:15:4b:8f:0d:
64:53:d4:2b:4c:ed:3b:c5:dd:57:db:e1:ce:24:86:72:ae:a9:
c0:39:d1:72:d7:1f:03:96:bd:95:67:8b:30:2c:5d:fc:ff:43:
d2:56:fa:4c:45:26:da:6b:9c:fb:8e:14:8f:91:4a:be:42:2e:
2e:0f:d9:f3:6d:3e:e8:a6:8c:46:9d:81:d8:a2:d0:f1:6c:5e:
c3:9a:2b:5e:bc:88:35:c2:f2:80:5d:62:74:bb:42:b0:ba:96:
7b:aa:0e:21:fd:19:22:39:1d:81:6d:20:c7:90:ba:ec:e6:3d:
01:dc:8f:f0:aa:0e:0a:0d:96:3d:ff:97:f3:7e:79:c3:04:3f:
09:3d:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:02 2025 by rpki-client