Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
File: 5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa (raw, json)
Hash identifier: T3yECROvy/N5a3RyxbkrvEmFZjaqtxRKWVMTp962PFo=
Subject key identifier: A6:51:C2:6C:56:34:E0:B8:6F:81:86:D1:74:A8:E1:DC:8B:02:89:61
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584893C586B6B9001ADC08FBC2C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
Signing time: Fri 17 Jan 2025 18:28:42 +0000
ROA not before: Fri 17 Jan 2025 18:28:42 +0000
ROA not after: Thu 17 Apr 2025 17:28:42 +0000
asID: 7029
IP address blocks: 173.187.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:c5:86:b6:b9:00:1a:dc:08:fb:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 17 18:28:42 2025 GMT
Not After : Apr 17 17:28:42 2025 GMT
Subject: CN=109d0319-479d-41db-bb37-3946797e99e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:25:1a:30:cb:77:46:35:03:38:da:89:7c:
e8:4a:d5:1d:03:b1:e3:79:67:a3:4d:02:5a:31:27:
4a:ac:0d:3d:1c:eb:5f:06:a4:07:1e:03:d3:52:74:
24:84:2f:1a:55:6f:b7:80:b1:32:6a:02:cd:b3:22:
1a:7c:0f:ed:df:28:7e:5c:4c:7d:be:0f:57:9f:58:
fc:4e:a2:f4:71:03:e7:72:62:3b:e4:c3:a3:b0:7b:
d1:0a:31:01:9c:03:9f:e6:f0:47:54:b1:a9:d0:11:
17:62:76:f6:b9:cf:5a:51:10:1e:c8:87:6d:6c:46:
4f:bf:a4:10:7e:69:a9:64:71:c1:f2:0d:7c:b5:7a:
40:75:b0:a1:a1:f9:40:f3:a9:9b:65:c8:a3:fe:9a:
1b:a3:4c:f6:a3:89:d7:e9:f0:61:6c:3d:f4:74:5c:
1f:c7:1a:5a:be:52:c9:fa:ce:05:7e:eb:a8:4d:6a:
e5:ef:fa:d8:3b:b1:9f:8f:09:ba:1c:64:15:09:77:
c5:04:32:9b:d3:61:df:71:61:c6:1b:29:84:9c:82:
b5:50:6c:86:15:fd:c2:b5:d7:b7:a2:e5:51:6f:62:
55:af:28:ae:86:d4:af:13:3e:f6:81:a0:83:e1:69:
3d:2f:14:ea:68:9e:c9:d7:20:34:c2:6c:61:04:28:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:C2:6C:56:34:E0:B8:6F:81:86:D1:74:A8:E1:DC:8B:02:89:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:81:96:65:bd:e4:53:c3:24:a2:6c:55:4c:e2:e0:2d:8b:cd:
3a:f9:9c:0e:c9:ba:62:b4:b1:2f:71:1e:b1:ca:04:fe:ce:ed:
50:4e:99:ad:72:d2:27:08:b3:97:57:93:da:d6:03:d3:84:f9:
62:fd:b1:a9:b3:dc:f6:5b:9b:bb:47:f4:fc:d8:ea:73:9f:85:
52:f0:31:a2:1a:4a:b2:2a:e7:46:17:b9:3e:41:ed:d2:32:52:
c2:7d:41:e6:ac:c0:1b:61:d2:a4:75:62:23:81:ef:4c:2a:cf:
9e:6b:6c:0e:59:71:49:dc:98:06:b7:69:ca:7f:4c:4f:8d:eb:
f3:69:92:46:57:d8:04:b5:bd:05:aa:9b:0a:51:7e:d5:6b:56:
c1:d7:e3:fa:d1:fa:4c:88:2b:af:53:8f:4d:b8:05:d9:7b:ba:
24:56:f7:4f:79:ae:42:59:67:f3:68:a1:39:34:4e:43:69:02:
12:01:74:15:7e:c1:02:4d:b1:26:8c:a4:a4:0f:ff:f2:85:96:
a0:22:51:48:8a:e9:37:33:4a:25:f7:8a:3c:f6:c5:f6:d3:91:
17:7e:97:f6:45:31:db:6b:bd:6b:02:fa:20:bc:f4:d2:a1:42:
d3:36:13:f3:1a:95:4e:4e:ae:44:3a:41:0a:cf:9e:02:75:a1:
ee:1c:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:31 2025 by rpki-client