Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa
File: 73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa (raw, json)
Hash identifier: Prrfd5fqs1r/ai2Uxe+A/Ongmw2v6bTkOKgCXm70eXA=
Subject key identifier: 89:F3:7C:92:FF:58:64:B9:6F:C7:40:36:16:7A:A4:3F:8D:9C:82:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858487AA1CE9C67290749DD544EA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa
Signing time: Wed 08 Jan 2025 18:21:32 +0000
ROA not before: Wed 08 Jan 2025 18:21:32 +0000
ROA not after: Tue 08 Apr 2025 17:21:32 +0000
asID: 7029
IP address blocks: 173.185.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:a1:ce:9c:67:29:07:49:dd:54:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 8 18:21:32 2025 GMT
Not After : Apr 8 17:21:32 2025 GMT
Subject: CN=b33539f8-1817-44b0-80ab-346a682a4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:ec:66:bd:58:a5:3d:87:a9:99:37:a1:8b:
5d:76:46:36:2b:d1:c2:3a:f5:66:d5:1d:a6:f0:67:
24:da:03:7d:a0:cb:25:dd:9d:98:a2:6d:45:d1:8e:
1c:17:35:31:8d:d0:86:9e:49:e7:fb:3c:e5:28:cb:
08:f4:70:77:e9:4b:e2:9f:ce:e8:65:8a:d3:48:de:
57:c4:f2:e0:ec:ea:17:18:7a:77:9e:ce:9b:7f:71:
05:a3:6c:03:4c:d8:1c:fe:bb:4c:a4:08:a7:c1:8c:
56:e5:d4:27:b7:60:f1:63:24:02:05:54:03:3a:31:
f8:99:d9:6a:d6:a4:72:37:85:47:36:db:f3:e0:ec:
89:f9:6a:be:fc:e9:53:dc:09:77:47:e8:ff:67:44:
7d:bc:a4:2a:02:f0:4d:b7:78:f1:fd:75:32:2e:0a:
d1:27:ae:71:9d:fd:41:ff:b8:a8:12:f7:f8:26:83:
da:3b:71:73:3b:dc:10:5e:f7:a6:54:fc:52:a9:e4:
82:5f:78:25:ec:46:90:9d:a7:f0:98:3a:bb:7d:b0:
33:c7:73:0c:5a:b8:14:1a:ad:d3:af:62:6f:29:85:
2d:d5:a1:11:dc:ea:bd:44:d2:4d:12:20:3b:de:e4:
58:b7:44:b2:7f:87:03:41:f4:a6:53:cc:f2:b1:65:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:7C:92:FF:58:64:B9:6F:C7:40:36:16:7A:A4:3F:8D:9C:82:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:87:20:f4:b7:68:c3:d7:48:8b:29:3e:5c:00:fa:ef:21:fc:
6a:fc:53:cd:2a:1d:c9:d6:f1:fe:ba:ae:6e:98:4d:af:19:8f:
b0:a7:da:a2:8f:28:a2:fb:a1:9c:00:9d:13:a3:65:60:af:5f:
a7:14:2e:f3:ba:93:d0:ff:af:00:3f:91:32:8a:22:e8:5a:6e:
f6:d0:67:7c:df:f2:f1:4d:c2:d8:a5:93:86:6c:72:ec:e7:55:
3d:65:4f:a0:66:9e:38:be:29:d3:4f:dc:fb:bf:41:bd:65:a5:
0e:ca:cb:4f:3c:37:2d:db:4d:ad:f0:97:74:7d:f0:6d:67:95:
70:40:4b:bc:ef:b7:ce:8c:0a:dd:52:a8:08:be:e1:1a:33:c6:
f2:47:c2:ed:6a:34:ef:88:1b:0d:29:6b:2c:07:bc:09:7e:51:
69:3f:d2:96:9e:23:98:d1:84:be:1a:06:31:37:67:a7:0a:b3:
5d:ff:26:04:c8:f5:23:b6:b9:7d:b6:fb:f0:a9:c3:ff:c2:e0:
97:04:61:a3:f6:b3:ed:5c:a2:53:69:f1:34:11:7f:c1:a5:6b:
7b:dd:e7:8c:4b:4b:fe:f4:5f:16:f5:77:df:c5:a0:6a:0a:9e:
b5:89:3a:c8:42:17:73:1d:f7:96:be:12:60:e6:c0:63:b9:dc:
be:4c:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:04 2025 by rpki-client