Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bacb737-acd9-35ce-a1db-5af0de30dc90.roa
File: 3bacb737-acd9-35ce-a1db-5af0de30dc90.roa (raw, json)
Hash identifier: PUfFvbc5wHK0LhabKWxeZCMhps/HVfDrZfuXDRPoR8s=
Subject key identifier: 89:40:54:86:37:AE:22:D6:36:17:90:E3:BB:91:42:2B:31:6B:AC:AC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289ACC55FA4C0370FF64F20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bacb737-acd9-35ce-a1db-5af0de30dc90.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 162.40.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:ac:c5:5f:a4:c0:37:0f:f6:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=d2685e53-f8ad-4d26-80c7-e104bad4e7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:0a:c0:15:3a:3a:c5:82:76:19:4f:a3:7a:
64:71:5b:dd:c7:41:51:65:7a:9c:eb:15:58:fa:dc:
bd:2d:d1:df:94:df:77:58:1d:f5:2e:81:68:2a:36:
40:7d:64:16:02:9c:09:13:a0:f8:fe:95:c5:91:70:
78:f4:2b:da:4b:6b:5f:38:f7:e1:a6:2b:a4:69:31:
dd:88:90:fa:00:78:e1:ad:c6:1e:93:55:30:bb:4e:
76:fa:e3:1f:69:82:26:79:e3:a9:d3:d0:d5:4d:c2:
4b:10:4a:e6:87:3c:56:38:df:b7:25:62:41:6d:83:
73:cd:76:13:a8:2c:bb:3d:26:ab:c6:f6:c1:d5:ba:
25:f7:6a:73:eb:dd:70:50:5a:d4:33:be:f2:48:d2:
ab:24:01:03:38:44:1e:ce:24:70:d1:72:54:7e:1e:
d0:67:01:10:cc:23:e8:76:e9:5e:05:53:15:3b:97:
62:49:8c:c5:9f:47:49:73:21:cc:c8:b7:50:98:8f:
59:96:92:30:d8:fa:5f:7d:5e:87:20:9c:31:f5:34:
1d:d6:f2:33:57:34:b6:c6:16:c1:4a:b5:fc:ff:fa:
4c:8a:30:59:8e:99:ab:62:84:35:1c:e6:63:4c:22:
d9:06:13:90:14:25:52:ca:5c:ad:5c:de:53:e4:80:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:54:86:37:AE:22:D6:36:17:90:E3:BB:91:42:2B:31:6B:AC:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bacb737-acd9-35ce-a1db-5af0de30dc90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:62:15:a7:26:8b:aa:c0:cb:da:9b:15:a8:ff:ba:2d:f7:75:
92:98:96:82:19:4d:ec:f5:f7:a0:ee:7e:ba:56:77:7b:56:c9:
3c:0e:5d:b2:d8:96:1a:e3:c3:52:be:f5:da:83:03:e6:f5:ca:
29:aa:85:d7:12:79:78:2e:02:df:f9:a3:40:ea:15:ea:f4:8e:
5c:4b:19:a1:46:ae:19:d6:5b:60:8f:fb:ea:57:87:b1:3f:79:
6a:8a:7e:4e:c2:5f:80:4a:50:02:23:7e:d3:79:da:20:13:2f:
11:31:b7:df:13:b7:5a:5e:0e:8c:b8:aa:47:0c:15:64:ee:72:
56:16:e2:cc:b1:a7:e9:3c:cc:8f:42:c6:d1:c2:07:0c:94:eb:
f0:a4:53:72:2d:f1:cc:64:a2:7e:41:3f:e7:6d:47:a5:ae:d3:
7e:38:90:15:fd:95:03:cb:62:a4:4f:9f:4e:95:2c:f3:28:41:
81:49:93:73:2a:ae:3b:aa:5b:54:d8:95:b1:82:9a:52:68:ed:
f5:d0:2b:07:c4:ab:3f:f5:7e:e2:f6:b6:2e:aa:32:df:14:a0:
b9:d7:d9:57:39:82:4e:d0:82:0e:7b:c3:1f:83:c2:da:2e:9a:
d4:1d:68:13:52:8a:77:34:9d:0b:2a:7c:73:08:87:13:b8:03:
65:f0:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:07 2025 by rpki-client