Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa
File: 4ece68d6-689f-306d-aad5-aefc8447de5f.roa (raw, json)
Hash identifier: 3GCZ3YYUwJ0ouX7CH2ZChdoN5qSNtfwolIvB16NChv4=
Subject key identifier: D6:BB:A0:79:F4:5A:E4:CF:F7:79:BC:AC:E3:DF:8E:12:8B:07:3D:83
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D715F1B7A78BF3D04DB6C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 50.96.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:5f:1b:7a:78:bf:3d:04:db:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=f0f3a16f-f968-4e05-a290-15931f0c36c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:0c:ed:33:15:c1:45:7d:5c:81:58:d7:64:
6f:03:cd:45:69:8b:4b:40:dd:06:80:ac:c6:fb:3f:
ea:2f:89:4f:0a:e7:34:89:21:5e:51:89:85:a6:65:
8b:e9:1e:42:a9:8c:35:4c:61:10:5f:e2:90:43:30:
6b:2a:5d:46:87:3e:17:c3:a7:b1:bd:79:55:7d:21:
a9:38:53:3f:7d:95:e8:e0:63:5c:34:1c:80:49:dd:
6d:1e:80:28:f0:68:d5:4a:ad:9c:22:d4:6f:f0:a0:
84:c1:f5:4b:15:a9:11:f3:ab:eb:77:87:bc:b2:8b:
25:51:62:06:bf:0c:14:f0:76:8e:b2:85:49:97:59:
93:9f:ac:f6:ff:f5:60:9e:7b:8a:49:4f:4e:b3:0e:
98:12:a0:c6:ab:23:45:24:a1:b6:a4:db:08:ef:58:
d9:26:50:d6:25:12:8d:29:59:93:46:33:e7:68:5f:
21:64:20:1b:0a:32:41:d8:12:af:95:04:6b:35:c4:
a5:50:d6:b5:0f:52:c0:7c:05:36:4a:64:fc:17:5e:
d6:f4:af:4b:b7:4f:42:f3:e4:3b:44:c5:2e:3e:8a:
ad:0c:de:7e:0c:01:e5:f2:ab:40:35:85:ca:cb:49:
b9:c8:1b:0c:35:8b:a9:a1:49:e4:02:ed:42:24:14:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:A0:79:F4:5A:E4:CF:F7:79:BC:AC:E3:DF:8E:12:8B:07:3D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:17:3a:73:88:a5:ce:51:0a:e0:fc:d4:20:c5:05:c4:57:96:
14:bc:5b:df:72:bb:6c:02:b0:19:a9:cd:3c:f4:a5:c2:36:43:
9e:a6:57:ca:6d:3b:70:b3:8f:2e:6b:ea:e6:86:dc:69:18:03:
79:35:d4:f3:d4:24:fa:55:06:68:1a:5c:c9:a7:22:73:a3:45:
9e:02:9b:be:19:50:c4:95:60:09:dd:e7:fc:3b:6c:f4:99:1e:
78:98:c4:d4:8b:e8:6c:89:b5:47:4d:dc:f9:25:29:e6:e0:89:
f2:91:84:9f:72:38:ea:b1:e8:4e:cf:7e:54:f7:c8:f3:60:80:
b3:7f:42:b8:ec:9d:02:a6:06:73:ab:9c:e5:92:a3:3e:8b:4c:
dd:23:a8:28:e1:3a:20:ab:b1:97:70:8d:40:7f:f2:c8:40:f5:
85:77:96:3c:c3:5d:94:2c:31:3c:38:1b:16:e2:c3:46:7a:77:
82:e9:c3:61:a2:6d:69:ec:12:e0:be:e4:4a:4e:06:61:cd:b1:
9e:67:a6:68:5f:f3:cf:88:bb:55:86:59:bb:68:3a:54:1b:d6:
93:2f:07:91:8a:cb:60:52:2a:3f:db:22:6e:67:34:c1:38:fb:
ed:48:4a:6b:d2:8d:09:45:65:5c:31:43:95:9d:f9:da:c0:79:
d5:b7:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:08:16 2025 by rpki-client