Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa
File: 5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa (raw, json)
Hash identifier: YC0XjDgkbb6TWClo8KnvhAO8A5Q2Jk7lBVksg69OFo0=
Subject key identifier: 85:5E:42:AF:40:10:EE:07:79:D5:F4:6A:21:2D:3B:2D:D7:27:C9:CA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2111C2E9E34927107DF5DB8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 67.140.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:1c:2e:9e:34:92:71:07:df:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=fc970453-66ec-4684-bff8-abf147884af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:13:d8:d2:60:73:9d:f4:e4:c5:41:f0:25:
0e:ea:5c:62:03:d4:ea:e9:e9:01:db:6a:2c:70:da:
f7:50:2f:bc:5f:ea:27:6b:80:e7:94:99:7a:d9:2a:
54:a8:a1:fc:30:9a:28:c5:b4:f7:38:8f:e0:a6:3e:
37:03:ce:5b:6d:d7:95:42:87:3f:89:ab:c7:2e:8a:
13:2e:04:e7:04:e7:9a:49:12:f6:3e:c5:c0:c7:76:
56:7c:7c:d3:5d:14:ca:14:9d:d7:2f:a9:9e:3c:c2:
c2:b8:76:77:a6:ef:fc:34:1e:fb:0e:ca:d9:24:a4:
93:63:64:be:6d:f6:42:4e:cf:26:f0:20:aa:8c:57:
0e:a6:81:86:b3:88:47:f4:1d:5b:41:20:e6:c4:5a:
47:ff:c9:e8:57:8a:25:fa:ae:39:82:c7:b7:02:bb:
6c:fc:c1:92:31:e6:5f:84:7b:3e:d5:b7:6e:86:fc:
ee:cc:b8:13:79:c4:47:42:bd:d2:52:e0:3b:8d:20:
c0:7c:19:db:d7:a4:5c:81:f1:14:bc:68:47:b2:da:
9f:f3:27:7e:8e:fb:6a:04:54:db:36:de:7b:3a:6e:
85:ef:11:cc:4c:76:28:ca:96:16:0f:79:3b:52:88:
b3:e0:25:9a:7f:0c:6d:4a:54:a3:a6:65:95:5f:eb:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:42:AF:40:10:EE:07:79:D5:F4:6A:21:2D:3B:2D:D7:27:C9:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:9a:f7:a0:ac:70:9e:54:09:ba:48:12:20:7c:ff:5e:af:09:
46:77:c6:40:28:c0:86:ac:30:96:15:95:79:17:18:da:fc:2b:
8b:30:18:62:04:26:9b:c7:54:08:cb:ae:2e:5d:b0:ca:bf:52:
98:9a:9a:aa:e0:0c:cc:ac:4d:9b:64:de:d8:d9:44:18:c7:f4:
2e:f0:ae:d3:4d:91:da:3d:dd:d8:0f:47:da:78:e6:e6:67:ea:
72:ee:f4:a6:3d:63:49:db:5d:83:fe:89:c3:84:ff:75:a1:3a:
97:90:5c:6c:41:72:10:e5:fb:b6:a1:f2:ca:f4:41:28:80:14:
49:4a:ff:75:4f:76:b3:61:26:c4:a4:43:ee:af:40:1d:eb:f5:
00:98:90:ed:22:8a:61:91:ba:68:a9:5f:cc:19:b2:73:ee:ff:
2b:e0:81:36:f8:10:8c:b4:e0:ca:ee:9d:50:7d:89:f6:51:6f:
f6:ad:67:a5:6f:9b:09:d0:ce:05:7f:bd:db:45:c5:ea:4f:43:
e0:c7:b3:d8:6a:f1:ff:17:32:ae:22:e4:60:7c:40:ca:f4:73:
b3:69:c2:c4:b5:04:b6:d2:26:b0:ff:7c:17:ef:32:ae:91:c1:
6f:71:1b:20:d2:23:a3:f8:dc:69:3d:d5:2d:ce:5a:af:49:3d:
9b:80:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:04 2025 by rpki-client