Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa
File: 4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa (raw, json)
Hash identifier: l6lnOXGxTjbY6r7+7XzpA7io7iX0WpHy+v3cYkR51hU=
Subject key identifier: 2F:C9:B7:0E:9B:03:84:9F:F3:3D:46:F7:75:EF:B0:80:44:95:2B:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30FC77DB9BAB6EF0F5CB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa
Signing time: Tue 21 Jan 2025 20:39:07 +0000
ROA not before: Tue 21 Jan 2025 20:39:07 +0000
ROA not after: Mon 21 Apr 2025 19:39:07 +0000
asID: 7029
IP address blocks: 173.191.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:fc:77:db:9b:ab:6e:f0:f5:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:39:07 2025 GMT
Not After : Apr 21 19:39:07 2025 GMT
Subject: CN=7a676dac-05ba-4fac-9380-e9916207e303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:b8:1b:c6:f8:92:89:74:6e:a9:40:2b:a8:
8a:f7:19:eb:76:03:cb:86:67:e2:d7:d1:8d:4d:64:
18:b7:21:e4:00:e3:c7:99:23:a3:14:cf:af:58:29:
dc:82:51:77:bf:66:a1:21:04:6b:11:c8:9c:52:ad:
a2:f0:5a:1f:ee:54:99:31:0e:d5:c0:dd:80:cb:68:
98:d8:0e:3d:1c:f6:9b:17:98:76:dc:ad:55:8b:38:
93:59:13:0e:05:2b:7f:6b:a8:77:5a:b9:e8:a8:75:
2d:78:a0:01:26:bf:62:20:71:88:25:c3:8c:23:ef:
13:27:02:ae:99:8a:da:1a:f9:ee:84:05:7b:cc:28:
0b:6c:13:fa:30:f4:a2:ad:2f:dc:48:d5:75:fe:98:
b7:58:d6:17:e4:33:28:a8:b2:88:60:e1:d7:a7:7d:
b8:2d:37:dc:22:cf:d3:8e:05:50:27:bc:ad:4c:77:
58:0c:2f:1e:f4:20:5c:f0:3f:ee:11:6d:e0:27:ed:
95:2d:15:38:6c:b9:cf:af:11:fa:da:fd:31:a8:89:
a4:75:e2:ca:8c:22:6c:26:a1:b1:f9:bb:0d:fe:2b:
6f:08:93:05:94:31:63:c0:5e:bd:91:15:10:99:39:
c8:a2:2b:39:f1:79:5b:57:87:5f:fb:6f:0f:de:f0:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:B7:0E:9B:03:84:9F:F3:3D:46:F7:75:EF:B0:80:44:95:2B:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:90:fa:57:00:a9:d3:6f:28:c3:41:9c:c8:37:73:e4:19:c3:
4e:22:61:20:b1:85:ec:fb:32:dd:cc:33:4c:dd:36:13:98:16:
11:a7:27:fb:61:4f:43:4b:22:04:3d:a5:78:a1:8a:d0:07:a9:
43:76:d4:39:32:eb:77:f2:d3:6b:97:c3:1d:02:93:9d:a7:59:
d1:00:2e:2a:09:7a:ee:27:a6:eb:ac:4d:3d:a9:c9:42:6a:6f:
36:26:c5:ec:08:21:ae:03:d1:2c:d7:68:1b:15:ce:2f:f3:69:
0b:67:df:fd:fe:de:40:24:3e:80:0d:7c:5d:de:55:72:f2:28:
bd:b8:b7:e0:c0:c5:83:f1:32:61:25:45:11:27:b2:48:48:60:
28:01:b4:a2:7b:df:6f:1c:e3:bb:86:7b:ad:ea:d8:38:66:8c:
ac:31:07:79:40:17:31:22:5a:b3:cf:d5:5e:28:02:bd:da:2a:
f5:00:3d:06:40:cd:f5:ea:18:3b:2d:b9:a9:01:cc:0a:5b:b2:
eb:28:e9:bf:3b:ed:a8:ed:24:58:2d:aa:de:80:b9:29:2d:ba:
b3:e0:c4:d3:02:68:07:13:e0:b5:bd:9f:d6:3b:81:55:f7:ae:
01:bc:cc:e8:38:19:4a:8d:35:9d:bb:2f:66:08:e3:8d:67:b5:
99:24:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:14 2025 by rpki-client