Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa
File: 4ee3a52f-4216-30e6-9301-7439d905414e.roa (raw, json)
Hash identifier: DhauAZnsBvJAvvEGFuKhei/tDOaAyZL8dZHzV/KyVho=
Subject key identifier: 63:30:46:C1:67:30:E7:6B:23:49:17:6D:2A:DB:6D:EB:DA:A8:0B:F2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211240FCF3C5A3DB6374780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 174.131.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:24:0f:cf:3c:5a:3d:b6:37:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=258b2992-1709-4ab5-9226-1b7e0cc57125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:f0:2b:f6:ba:6e:57:38:37:59:ff:ca:4c:
6b:6b:5f:34:f1:d1:27:5d:dd:83:24:7f:3a:92:c2:
fb:3d:6b:e1:46:35:ae:31:be:24:3d:72:db:75:8a:
71:db:fe:8b:b7:a9:3d:c7:f1:d0:da:45:fd:7e:e0:
7b:ea:ca:f6:ce:e3:47:da:a8:d7:16:ee:2e:10:e1:
2c:0c:d0:32:e4:56:a0:20:b2:05:50:58:9b:64:99:
eb:81:48:10:58:57:f1:09:9c:29:f2:ad:70:66:73:
0d:f5:d5:c5:a9:a2:0b:64:c6:ca:dc:c8:40:77:64:
aa:a3:93:09:58:48:46:db:36:2e:9f:3e:50:54:75:
1c:5a:93:51:02:b0:ca:1c:18:f5:0f:de:af:b4:f3:
e1:64:7e:62:e0:38:9d:34:0e:f2:16:b7:0e:1f:dd:
59:42:15:71:c8:e5:9a:9f:a3:3e:09:03:b0:e3:bb:
0b:62:74:eb:71:d6:c5:cb:8e:6d:ec:5d:75:a7:0d:
33:3f:62:53:b1:2a:5a:02:34:0a:aa:21:0c:b8:5d:
e9:ad:5c:49:fa:a7:34:1d:09:a4:d3:79:b0:9e:56:
a2:d0:b8:12:63:8f:7a:59:34:61:dc:f8:44:66:0f:
00:e4:cf:29:c7:f8:f1:40:66:94:15:4b:71:92:bf:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:46:C1:67:30:E7:6B:23:49:17:6D:2A:DB:6D:EB:DA:A8:0B:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:22:28:3c:55:b9:2f:8b:9f:91:5e:25:81:28:b1:02:e7:30:
d0:2a:80:31:ab:98:ab:6f:41:91:30:60:8a:cd:53:4b:52:3a:
a3:6a:dc:4c:dc:2e:79:6b:ee:9a:d7:92:a7:b9:22:21:cd:5a:
62:95:b7:c8:b3:85:e1:99:cd:cd:03:a6:d7:f1:ee:30:b9:ab:
7e:76:b6:9f:29:3d:e0:eb:04:08:8a:a5:9f:5c:3c:11:2f:85:
f7:a5:14:91:05:82:78:3c:10:e8:38:19:b4:02:b8:1d:6d:f8:
2c:9b:77:6e:e1:04:92:8a:32:bd:41:85:d0:41:b7:d3:6e:92:
7d:23:3c:ef:8f:a1:24:fc:d6:14:6a:c1:c4:fc:26:da:9f:0a:
0a:b7:b0:27:88:b2:3c:19:ed:74:28:d5:51:9b:b2:49:59:db:
47:66:d4:b4:21:93:bf:0b:d8:76:7b:64:92:7e:d0:65:7c:fd:
57:06:57:69:29:93:a6:4d:94:7a:54:76:e4:c4:ef:a6:d2:28:
ee:10:fb:cb:d4:f9:5e:03:9c:01:7f:5b:49:0f:72:ef:c6:9a:
57:13:ea:3b:e0:6c:32:81:92:6d:bf:58:7e:66:4c:3b:cc:52:
85:5f:b8:54:0d:b9:67:b1:d6:a5:21:6b:78:d8:5a:6c:06:5b:
80:c2:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:30 2025 by rpki-client