Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa
File: 641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa (raw, json)
Hash identifier: SaKCZuJLZ3ecQg/ijG76/MUUO61CsUXfm94YtQWQ12g=
Subject key identifier: FD:8B:1E:44:6C:CB:2A:23:9A:84:AA:DD:20:53:00:BB:BE:12:CF:A1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30283F8F9924B0D309AC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa
Signing time: Tue 21 Jan 2025 20:37:27 +0000
ROA not before: Tue 21 Jan 2025 20:37:27 +0000
ROA not after: Mon 21 Apr 2025 19:37:27 +0000
asID: 7029
IP address blocks: 174.131.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:28:3f:8f:99:24:b0:d3:09:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:37:27 2025 GMT
Not After : Apr 21 19:37:27 2025 GMT
Subject: CN=621e9d4f-f84b-4687-bbd8-848a074f2e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:f0:4d:07:c6:2a:04:e1:ed:f1:38:d9:73:
94:93:64:2f:1d:12:70:63:af:83:06:e8:ec:9e:0a:
59:d8:cd:e9:78:36:27:05:89:bc:56:78:b9:e9:48:
bf:76:c1:11:a0:57:e4:35:30:68:23:91:42:2f:ea:
8b:37:0c:44:87:69:aa:d7:fe:a2:d7:31:f2:8e:d0:
71:67:d2:62:8a:0f:50:ff:44:09:63:de:fc:1d:33:
18:d2:2a:d9:d2:43:e0:94:f6:80:f7:f7:fc:4d:cb:
a7:29:eb:55:af:e3:36:af:86:3a:28:ce:04:2b:a9:
34:14:b6:ca:0e:aa:5e:4b:0c:e9:d4:0c:1b:41:6c:
66:08:ff:bb:63:58:5b:71:52:28:0f:f5:45:84:86:
bb:ed:81:9f:23:0f:31:54:0d:aa:f2:43:be:2f:8d:
bc:fe:e5:23:5c:84:d3:7c:58:07:dc:a8:ed:e2:6b:
1d:5e:1f:c6:29:ba:1a:90:95:09:6e:8c:b8:b0:89:
73:5f:bd:30:9c:69:e0:34:e5:8c:f5:95:07:e1:2a:
2c:9b:8d:6d:74:1f:4b:a7:b0:dc:98:71:96:53:99:
0a:95:0f:6e:3a:83:9f:56:f2:d4:c3:eb:b4:de:ec:
5b:a8:56:a6:5c:cd:ab:9e:96:40:4a:98:11:76:8d:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8B:1E:44:6C:CB:2A:23:9A:84:AA:DD:20:53:00:BB:BE:12:CF:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d6:ab:68:6c:cf:6d:e3:ef:23:8e:41:c6:30:01:2a:8f:bd:
2f:1a:8f:e1:4b:01:76:d7:c8:45:ee:23:c9:a1:19:45:a7:dd:
23:0f:e8:94:f2:b0:77:f6:c0:a3:bb:a5:70:f1:a7:20:85:3b:
a9:b5:63:12:a1:84:e0:9a:2a:ed:a7:21:df:c8:16:eb:05:ea:
a8:d8:0a:ed:6a:19:bd:ba:4a:f8:bb:b1:98:87:28:21:25:83:
a4:75:7b:b2:60:53:e7:2a:c6:e4:d8:bf:5b:c9:f8:04:bd:67:
0a:e1:a9:ac:d0:8f:74:c3:9a:48:79:09:18:56:0c:15:cd:9d:
6c:64:44:8c:93:5b:d2:0a:4d:34:f6:49:a3:34:1d:5d:11:57:
09:c4:73:cb:48:c4:fc:32:6e:30:94:02:78:6e:04:13:75:74:
3a:90:81:68:c9:7f:f3:09:45:42:5c:e7:82:00:5b:67:5b:21:
76:19:54:d7:2f:86:f4:80:61:c2:e9:63:b0:8f:5f:b8:5a:c1:
d3:d4:b0:88:73:a9:5d:a2:13:52:ba:41:68:26:69:77:ac:8e:
2e:4e:8b:0e:84:12:d8:5e:41:20:cd:32:0f:7d:fd:5a:bb:2f:
19:9a:ab:00:89:ba:27:cf:c8:7d:d7:94:3e:72:aa:69:c3:f5:
d7:e3:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:26 2025 by rpki-client