Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa
File: 49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa (raw, json)
Hash identifier: HACSGR/dQpvJIqQKXrGgzb1aI26+rXeSg3YXU4oqYu0=
Subject key identifier: 00:3B:90:CC:DF:10:7D:12:A7:7A:97:AB:D6:B1:AA:FF:45:E8:3D:50
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F9DF81860FC554FAC5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 209.252.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f9:df:81:86:0f:c5:54:fa:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=cf2a2436-1bf5-4dd9-b7e5-ff930d1e389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:e2:d1:55:87:57:fc:9d:43:de:cd:fb:48:
f4:8d:0a:0e:55:ba:60:dd:16:70:39:d2:bd:22:ca:
df:f4:ab:f4:b2:7f:79:73:ad:45:6d:3d:27:ba:49:
95:d4:9d:2f:e1:0b:c0:95:cd:c5:4d:59:51:51:b9:
ab:01:03:e0:13:db:57:5e:01:e5:e8:2c:ab:35:5f:
82:c4:67:c2:21:19:6a:23:11:f1:d9:40:68:b7:96:
5f:0e:de:84:71:8e:ef:6c:19:44:e2:43:07:1e:6d:
17:19:72:4c:1c:cd:ff:44:64:64:38:d5:33:c0:31:
de:78:b2:5f:37:a0:5c:f8:de:21:ec:f1:b3:d8:07:
22:7b:89:db:26:f5:e9:d3:61:73:42:62:28:31:39:
6a:96:09:3b:5e:83:dc:86:a5:28:42:65:93:e8:e5:
df:22:ba:3e:bf:54:6b:4b:9b:e1:8f:d7:22:81:c4:
c1:a7:61:a1:23:38:23:2a:69:15:10:79:af:6b:85:
b7:ec:52:5f:6c:f6:17:57:b5:5a:a8:97:37:a2:d2:
0d:4d:1c:1f:d2:18:2f:c3:05:5b:cc:06:0c:71:74:
4f:08:98:a8:c8:7a:ef:95:7d:22:98:cd:ae:6a:20:
6d:1b:92:a8:f5:24:74:a8:5c:9e:32:61:79:18:d5:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:90:CC:DF:10:7D:12:A7:7A:97:AB:D6:B1:AA:FF:45:E8:3D:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.252.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:03:5e:3c:47:7f:1e:7d:e5:6d:f1:6d:28:51:b6:8f:6c:83:
a0:58:60:6d:06:e1:dc:2d:6d:1c:c6:e6:7a:7a:48:44:56:4e:
71:ad:eb:f7:87:b3:48:18:7d:36:81:79:03:84:d8:ee:97:5c:
63:a0:8f:82:01:46:d4:be:09:78:85:d7:b1:ee:db:1c:99:11:
9e:fb:4c:20:d0:4e:5d:cb:28:ef:9f:f6:5b:02:2c:68:ee:68:
9b:ee:85:06:12:fc:5f:04:85:9e:d6:1f:82:45:24:ad:c4:da:
db:34:e9:c2:94:c0:85:b1:98:48:24:d1:5d:4b:a9:b4:f9:23:
79:cb:7b:16:9f:a8:e3:16:7c:8a:d3:c2:bf:c4:da:bd:4f:9f:
1c:bb:9b:91:bb:69:d8:1b:75:01:ca:bf:9e:19:02:f4:af:7d:
4d:05:cf:50:61:93:34:4c:0c:f8:05:ca:d8:9f:40:32:90:95:
15:ab:0a:92:c9:99:f7:02:94:bc:9b:ce:35:ca:09:e9:5b:a5:
56:17:28:15:ce:bb:97:ee:c7:17:80:f0:9f:79:0b:c2:d8:2d:
5e:f9:60:4a:ca:65:7a:86:94:8e:bc:c8:e4:b9:71:7c:94:f8:
ad:d0:96:4a:92:1f:7d:66:b8:33:26:7f:44:dc:d9:49:67:30:
b4:1c:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:59 2025 by rpki-client