Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ff32ac3-0ce7-36eb-a0c8-a19aa30abe33.roa
File: 6ff32ac3-0ce7-36eb-a0c8-a19aa30abe33.roa (raw, json)
Hash identifier: 6OLSVDagJg7YUolGNFnMyHRwv5eb5ub3iz010WZWM+I=
Subject key identifier: 4B:04:9A:46:9D:D4:5D:78:06:87:B2:DB:F6:6C:8A:C3:D5:CF:24:F7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21105AE4A39015D6FB87100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ff32ac3-0ce7-36eb-a0c8-a19aa30abe33.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 40399
IP address blocks: 63.138.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:05:ae:4a:39:01:5d:6f:b8:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=f5365f99-ba47-41b8-b784-b2bb2cba7a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:32:55:1b:8c:44:de:f7:cb:8d:f5:55:a5:
19:b4:f6:cf:0b:50:79:3a:cc:31:40:e8:ac:a1:ce:
38:34:41:90:a4:c2:5d:ac:43:f3:f5:b9:a3:51:81:
54:c6:48:51:f9:2d:12:4d:0c:85:1f:5e:2d:ad:68:
ac:41:ed:1b:0f:26:27:8c:ec:47:01:57:d3:b4:f4:
04:83:29:fc:81:6b:b2:6c:32:d8:d8:da:49:6a:0a:
77:16:51:fe:e1:ab:02:0d:6b:f1:49:80:21:2c:48:
aa:49:23:26:c2:8d:f0:e7:fa:0e:68:20:3f:eb:9e:
cf:43:92:e5:54:84:d9:50:c4:77:80:94:54:e7:30:
a9:63:bf:aa:a9:4b:25:f4:58:2c:5c:5f:6d:00:6e:
74:79:76:aa:ef:eb:8d:f6:fd:8a:58:ea:51:15:79:
67:30:59:32:4d:cc:1a:75:db:af:5b:91:bc:fa:c0:
3e:e3:c3:3a:07:4a:3b:60:3c:15:bd:fd:9b:c4:76:
5e:b8:1c:cf:87:d7:cc:e2:70:bf:a1:03:23:ec:56:
1d:f1:ce:79:61:45:b6:5a:9a:1b:c7:13:09:00:41:
ae:13:2a:e4:a2:41:27:01:88:a2:fa:d8:68:1b:5e:
af:39:9c:f5:1f:da:c8:d0:b5:7d:0e:cd:55:c8:1e:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:9A:46:9D:D4:5D:78:06:87:B2:DB:F6:6C:8A:C3:D5:CF:24:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ff32ac3-0ce7-36eb-a0c8-a19aa30abe33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.138.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:16:51:ce:e6:cf:9e:d8:5b:d0:5f:d6:7d:3c:8b:f6:ed:81:
2e:b8:2d:35:03:a5:29:91:3e:42:47:b3:bc:e6:6a:7c:91:5a:
f0:74:4b:07:fa:8f:4c:37:1b:f0:78:03:9c:46:be:d4:f9:80:
f4:09:ea:67:d1:a0:bf:6d:da:6e:db:74:ff:d7:dd:0d:3e:36:
5a:8f:82:4b:e5:c4:0b:fa:e9:d1:95:f8:4e:f3:14:90:86:f5:
31:8b:5f:8e:a7:dc:b0:6e:25:35:ee:71:f4:44:85:26:ed:d6:
62:46:88:07:1c:05:74:a7:3b:f4:4b:e6:c9:8e:84:0b:62:7a:
e4:91:0d:ce:f1:84:1a:89:27:16:d9:7f:e7:89:56:b9:47:69:
b8:69:e3:a3:7e:67:3c:3b:c4:9c:c5:3f:d8:74:2a:8d:97:0e:
b3:38:40:4a:47:cf:7d:bf:08:e8:6a:de:98:ab:46:3f:a0:34:
02:46:98:dd:8d:a2:50:52:af:43:65:20:ae:0a:86:e5:02:48:
10:ca:cd:50:30:1a:ea:7d:48:c7:0f:76:1d:b8:40:9d:c3:15:
9b:63:fe:01:4b:8e:fb:91:e8:76:ee:57:ff:35:34:9c:3e:6d:
1b:12:71:6d:26:14:40:01:36:45:c5:6f:39:f0:83:db:85:95:
04:bd:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:53 2025 by rpki-client