Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa
File: 6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa (raw, json)
Hash identifier: LXfcTZwhGR5dqf8PD6aqneJqDiVK5WVI6hivIvee+v8=
Subject key identifier: 21:00:28:C3:92:D5:F5:81:CC:F4:44:B2:A6:10:7D:F0:CC:DA:6D:00
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848DA71010F058667EE843475C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 67.141.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:71:01:0f:05:86:67:ee:84:34:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=a24752c4-91fe-4149-bd9d-9b16146a86b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:3a:3d:e1:c0:fe:d5:17:bb:0c:fe:de:9f:
5e:78:5e:7a:88:cb:4c:f8:7c:c4:01:2c:73:b2:ff:
6f:96:c0:f2:0f:67:07:99:84:83:4b:6c:79:fa:44:
e7:ea:0c:53:12:19:56:87:20:0f:0e:c8:7f:4d:a9:
d2:8b:2a:77:07:5b:cb:87:c0:7f:d3:aa:9b:2a:24:
09:22:01:63:4a:a8:99:e6:ee:7d:5c:0b:84:47:2f:
54:76:6d:a3:b7:cb:40:57:1b:4a:3e:8e:06:1f:96:
4b:71:1d:90:17:23:e8:0d:66:50:dc:43:cd:06:10:
02:60:fa:66:04:73:0c:ad:37:18:32:4c:3b:e0:11:
df:ff:ec:46:05:7f:c1:34:27:c5:c4:65:2f:78:45:
fd:37:81:da:92:a4:4b:79:f2:c7:73:40:fb:64:49:
94:61:29:b4:58:51:db:b1:6b:ad:3d:e6:e7:3b:35:
6d:af:5c:02:a8:bd:d2:a8:70:6e:35:be:68:75:5b:
a5:30:d0:62:54:19:ee:23:69:19:26:bd:94:10:de:
f6:ed:81:61:f8:42:1f:4d:fb:ac:28:90:21:1c:73:
98:7e:9e:02:bb:03:e4:39:db:18:b5:c3:5d:e2:70:
f7:51:da:f7:bd:00:a9:48:2b:91:cb:4d:65:13:cb:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:28:C3:92:D5:F5:81:CC:F4:44:B2:A6:10:7D:F0:CC:DA:6D:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:16:bf:ad:4a:e8:d3:ac:c8:0e:23:28:a7:fa:d8:f9:71:6f:
81:ed:41:3b:4c:87:8e:ce:8e:ee:93:38:3b:0e:c2:6c:29:97:
0c:78:2f:02:50:8f:a5:fc:b5:13:10:49:5f:ca:3a:40:a4:d6:
20:23:32:c4:8a:8e:61:41:89:49:65:ab:a3:05:ab:02:28:2a:
8b:d1:74:23:c2:e6:05:49:b5:b3:ff:32:9a:2e:5e:b0:59:6c:
45:8d:8e:3e:70:a0:8e:f4:2f:13:71:51:b5:82:e1:58:aa:51:
6e:28:f3:26:d5:67:a0:82:7f:b4:08:f4:22:0d:63:9d:01:57:
27:56:7a:6c:b9:60:26:25:fd:07:ff:38:16:7a:65:01:19:20:
86:c5:df:25:55:1c:5f:0a:f9:7a:5c:c8:86:ed:98:28:a9:df:
91:b0:e3:3c:8b:21:3b:f7:a0:a6:91:22:fb:4e:31:23:22:fd:
06:04:0c:45:30:5c:fe:24:02:f7:64:ab:ce:f7:cd:9d:61:53:
a1:f5:fe:c5:7e:54:28:2d:24:cf:d6:1f:0e:22:cb:2e:10:9c:
b1:c7:a2:a0:7f:08:d6:59:63:d3:4e:7e:65:54:2a:b2:96:31:
1d:36:32:88:9d:f7:ed:02:66:65:b0:95:9a:bc:6c:87:fb:83:
85:4e:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:03 2025 by rpki-client