Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa
File: 51103c09-b130-39f4-ab32-0e03b2d423bf.roa (raw, json)
Hash identifier: HCJu7o1cJawXKrBuKUIh4EGMwyJJPF/9MltDqmmRDfk=
Subject key identifier: FC:53:AE:DB:05:7B:53:FE:B7:B0:A9:7C:38:78:7F:E9:18:9D:A0:A0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE11C7ED283C26464590400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 173.191.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1c:7e:d2:83:c2:64:64:59:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=197c63ad-3d99-4d84-ba54-a29b91356599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:eb:bd:8d:d8:7d:70:67:d5:80:d4:59:0f:
f6:ee:fd:5b:05:ca:22:eb:46:63:b5:e8:47:8f:01:
bb:e7:f6:a5:40:27:19:6d:a2:a9:80:f1:36:6c:c3:
7f:8e:22:f6:09:2f:16:b7:38:e9:d3:43:b5:56:ab:
99:4f:02:6c:5c:eb:9d:2e:ff:41:b0:d2:f1:13:c3:
c3:9b:9d:39:87:b9:36:ec:e9:5f:a6:8a:56:f3:8b:
8b:01:a4:59:d2:5f:8f:62:f2:f9:74:fa:e0:84:92:
28:7c:b8:83:67:31:37:52:39:c7:00:e8:71:c1:a1:
e2:fc:b0:24:8d:5d:ac:44:2f:a5:54:d4:80:ac:4b:
57:72:cc:6e:04:82:15:cc:5e:ac:63:fd:03:d3:25:
68:9d:2e:ca:47:3a:22:99:81:4b:93:98:ac:6c:ab:
68:e1:2b:5d:da:d9:5a:8e:3d:70:8e:1f:81:4e:bb:
69:27:a3:e9:4b:c0:cb:7e:c6:77:08:6b:31:a7:0a:
f1:8b:a1:ed:1c:7a:d3:b8:c6:7b:1f:72:38:09:b9:
e0:08:93:12:0d:d4:c8:c8:78:2e:95:ba:de:8b:93:
45:a3:0a:7b:b2:0d:21:b3:34:0f:d7:12:25:2e:a7:
02:ca:2a:4d:e1:73:9f:e2:1b:cd:34:3d:1c:6f:38:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:AE:DB:05:7B:53:FE:B7:B0:A9:7C:38:78:7F:E9:18:9D:A0:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d8:aa:fd:fe:42:02:94:d4:a0:fc:48:ff:02:63:d4:32:3f:
f4:ba:3b:c6:8c:e9:00:73:78:d1:99:bd:1d:cf:e8:3c:ef:ea:
3b:e3:c4:4f:87:18:48:3b:74:7a:f2:4f:3f:10:81:8e:11:db:
d8:4d:c7:10:6c:5b:7e:27:27:ae:c0:bb:c9:02:eb:11:fc:9e:
de:05:3e:24:fe:c6:81:a1:20:d8:47:a6:0d:cc:ef:61:94:0b:
b6:ac:40:bf:d4:43:92:ba:33:50:36:84:5b:35:20:6c:8d:37:
6d:79:b7:78:d0:29:3d:69:b1:71:b7:ac:30:94:40:f9:4a:60:
92:eb:d4:9c:46:53:33:9a:97:11:13:3c:cf:33:38:c1:d8:1c:
3f:b4:5c:f5:fd:48:de:9f:86:c0:0c:17:8b:aa:ba:30:6e:5e:
b9:b6:62:82:a0:1f:ff:e7:ed:36:14:9c:54:bd:5c:9b:24:76:
83:8e:ee:3f:0d:8a:7e:ed:c7:97:1b:2b:92:55:66:75:66:1c:
f2:42:c4:76:f2:31:5b:96:ce:c3:e2:3d:62:77:d9:d2:81:4e:
79:f7:dd:83:73:17:d0:2a:40:c4:c4:8f:5b:5c:8f:fc:64:7c:
19:a5:f1:30:5c:5f:df:4f:c5:20:b4:4b:35:51:94:70:e6:99:
a2:df:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:33 2025 by rpki-client