Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa
File: 4ca37203-9c88-36be-9325-8bdef4118d27.roa (raw, json)
Hash identifier: qlp1n3QeS7TpXNZROwRTgHFGgst7TXDKGcRJsL2FgAo=
Subject key identifier: AA:1C:EE:AC:40:CC:AA:E9:01:DE:3D:AA:F2:12:D6:87:81:55:C0:C8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849568EBAA09C40CC4586073A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa
Signing time: Fri 28 Mar 2025 13:00:51 +0000
ROA not before: Fri 28 Mar 2025 13:00:51 +0000
ROA not after: Thu 26 Jun 2025 13:00:51 +0000
asID: 7029
IP address blocks: 71.29.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:8e:ba:a0:9c:40:cc:45:86:07:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 28 13:00:51 2025 GMT
Not After : Jun 26 13:00:51 2025 GMT
Subject: CN=d6faaafd-2536-4c7e-bf8c-261775703508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:41:62:8e:14:a4:00:8a:19:91:ae:a2:b9:
48:94:dd:c9:ff:ae:a9:d8:36:28:21:96:c9:7f:d9:
4a:33:1c:d0:c8:65:6f:32:2b:4e:a0:96:fc:b1:4d:
5e:39:a1:3e:9b:7c:92:a9:90:dc:c5:39:5d:9b:e7:
b1:57:88:3e:44:c1:61:70:62:84:01:97:67:03:99:
4b:20:2f:a8:64:47:81:3a:3d:22:e4:6d:6d:6e:7d:
33:bf:b6:a6:9e:56:b2:5d:f1:77:b2:98:4b:10:a1:
c6:3b:7c:6d:1e:ae:ee:fd:6f:df:5a:dc:fb:75:66:
f8:69:06:e2:4b:f5:0b:53:6f:4c:c4:6b:20:07:83:
cd:41:23:85:99:64:05:2c:9b:64:5f:2d:fb:5b:0f:
52:1b:e2:b6:af:c1:4e:a5:9b:35:58:d4:01:2e:f7:
d5:ef:6b:c7:69:7c:1a:01:bc:ed:e1:4a:e5:c2:40:
9e:c5:1a:a0:10:41:28:6a:f1:cc:31:aa:f4:c3:60:
4a:d1:55:2d:2a:f0:af:e2:6a:ae:20:3a:70:94:3b:
a6:c7:fe:bd:f8:86:4f:d7:3e:71:4d:8e:f5:69:da:
28:b4:7f:89:99:6b:17:6a:d7:1f:b3:a5:b8:73:7f:
3d:d4:e8:a8:2b:62:f4:9f:77:5d:ab:7f:31:5a:0e:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:EE:AC:40:CC:AA:E9:01:DE:3D:AA:F2:12:D6:87:81:55:C0:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c9:30:28:fa:55:20:08:5d:07:2a:1a:e7:f9:87:0b:db:0d:
78:79:51:5d:69:c3:97:31:34:60:57:24:b0:ea:13:99:e8:0e:
88:c2:ea:0c:a5:cf:cd:f6:62:27:78:ef:59:f9:c0:7e:b9:6f:
b4:a2:de:98:61:f8:04:a6:0f:c1:9e:87:57:fe:64:9c:d8:92:
45:5d:9a:47:93:54:60:de:73:6a:5c:00:16:0d:8d:27:9b:26:
83:2d:9a:20:30:fb:8b:25:6f:d5:a4:b4:6e:92:93:37:d4:3b:
71:cf:d3:df:05:cd:e5:ba:58:eb:54:90:24:ce:46:e7:21:69:
4b:5c:d7:84:b5:81:8c:d2:05:c1:24:2d:e7:89:79:8c:69:2f:
72:7b:61:70:7b:7a:12:db:e3:b7:01:1b:fe:01:c7:95:36:fd:
ca:37:d3:3c:22:cf:a3:fe:1d:09:d4:80:96:62:e0:39:0d:bc:
90:12:02:78:e4:d1:e2:da:86:1f:94:71:73:b6:80:cc:42:a8:
18:13:da:9b:fb:35:5f:4c:85:60:67:ea:9d:e7:c0:b4:bb:d6:
7f:af:73:da:70:5e:b8:f5:79:7e:e0:f0:45:3e:91:b4:84:43:
b5:9a:1e:dd:c4:6a:84:99:a2:a4:23:aa:42:60:20:86:a8:d0:
1e:45:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:03 2025 by rpki-client