Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa
File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json)
Hash identifier: o+NjbuhQsbZNkA+VnNe6fYs+WN/rl9Q1JR3b8NZJJbo=
Subject key identifier: 17:38:83:61:E3:94:31:E7:E0:7B:B2:61:B9:D2:01:75:3E:0E:A2:E8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21117F8F0AFB6B6A24A7C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 40.142.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:17:f8:f0:af:b6:b6:a2:4a:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=a9065747-f7d2-4ebd-a297-720086ec92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:81:17:56:20:d1:32:43:d0:1a:bf:96:b9:
84:0d:d8:aa:c6:94:42:ad:d9:5e:ca:db:96:96:fc:
04:e1:02:20:6b:65:80:dc:e6:78:8b:b9:cc:4e:65:
40:c4:5f:27:d6:3e:8a:6d:a5:84:30:a0:ff:22:8d:
b1:97:70:f3:b8:92:07:4a:e5:32:e1:5d:4f:b6:a8:
e0:2b:ed:f1:d6:36:e9:19:46:11:ba:8b:14:2f:29:
d1:f6:7e:46:eb:9d:64:d1:b8:e1:4c:2e:d3:72:53:
4e:db:38:7e:ed:93:78:15:c2:e4:c9:76:e1:43:6b:
ae:b3:d8:a4:d8:ef:d9:72:b4:bc:c2:ac:3f:65:74:
d4:bc:d4:0a:da:bf:16:09:ab:32:19:09:4b:c8:69:
41:f9:bb:62:6a:71:2d:7e:5c:d8:8d:dd:a9:9b:fb:
2d:1f:de:6d:ad:b7:d7:4c:24:7a:78:1b:37:aa:9d:
fa:76:63:7b:68:c7:d6:19:3e:4b:26:bb:90:e4:a9:
e4:f6:9e:39:43:15:40:00:87:0e:1c:3e:02:a2:8c:
3a:dc:40:bc:62:03:ce:78:c2:70:ec:19:f4:29:9e:
10:f4:63:9a:1d:84:8a:8a:92:a2:75:d3:98:7f:13:
bf:1c:0a:fd:92:4e:58:b3:ce:d8:27:bf:6e:1e:b3:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:38:83:61:E3:94:31:E7:E0:7B:B2:61:B9:D2:01:75:3E:0E:A2:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:4d:94:62:0e:8d:df:d8:2a:d7:1d:63:17:aa:22:fa:e4:3e:
e8:83:57:51:50:49:d8:4c:f9:06:ff:e1:c4:97:5d:eb:f5:5e:
f2:79:c8:8b:e1:f8:eb:83:50:c9:ea:5a:54:e8:a9:13:43:c2:
2f:0b:c1:fb:aa:cf:14:ba:80:1c:85:d0:6b:ef:67:a1:02:b6:
54:90:53:d5:42:0c:68:a1:dd:e7:a3:3b:e3:40:42:e7:2a:6d:
0a:d4:41:ae:bc:e0:86:55:2b:21:30:8c:44:ed:4c:e9:60:74:
c7:a2:d1:31:5f:f5:f9:56:b8:2c:b2:a9:83:47:c6:2b:2b:27:
bf:d9:57:ad:1d:dc:fa:01:99:30:65:36:17:7f:63:18:70:18:
d3:01:a4:40:eb:94:6c:a0:86:69:8a:cd:b6:05:1c:a3:68:6b:
8a:ce:58:14:25:6a:1a:8c:60:fd:31:80:84:58:5c:11:c2:65:
08:44:7f:df:62:57:c0:43:5c:56:4c:ea:09:cf:45:70:2d:25:
ce:db:31:75:47:84:8d:14:1b:05:8f:9a:9f:29:ad:de:c6:02:
1b:ab:91:61:1a:d9:13:f7:4d:89:63:b2:a6:ea:54:14:66:5b:
f7:d2:67:8d:2a:22:ce:63:fc:60:b9:bc:13:6c:a4:e1:34:a0:
4d:6d:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:29:01 2025 by rpki-client