Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/769bbfb1-8bac-342e-89ef-c9919a4f168d.roa
File: 769bbfb1-8bac-342e-89ef-c9919a4f168d.roa (raw, json)
Hash identifier: tE398gLULmEqYfyRWRx2ze6MIXQ4B8b+rL8+LPkyWwM=
Subject key identifier: 55:2F:71:B1:14:DA:81:3E:AB:2F:C6:E4:79:3F:0A:DE:47:96:F2:E8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D7166D84A8A476B239DED00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/769bbfb1-8bac-342e-89ef-c9919a4f168d.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 50.96.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:66:d8:4a:8a:47:6b:23:9d:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=e644f89c-d68b-45da-b097-dae698c33826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:10:dd:06:30:3b:fd:b6:d3:86:9b:17:87:
a0:67:30:12:87:4c:27:62:e8:29:ce:64:4b:0c:bf:
5a:ca:51:89:f8:cc:0d:6e:61:05:f5:6f:2a:4d:d8:
b7:b4:e8:87:f3:34:d0:bc:ba:2b:2a:4d:8c:54:48:
9f:49:b2:2f:65:4c:b9:f5:c3:9b:1a:60:58:94:3f:
f2:dc:fb:e5:aa:02:90:74:a9:1a:47:d6:d2:2b:95:
77:c4:e0:ef:03:1a:cc:08:c5:51:34:0d:52:d8:cc:
1b:30:a0:94:2b:0b:8c:fe:30:ca:d1:ba:0d:fb:21:
d7:13:39:fd:57:54:80:b5:1a:c2:87:79:bf:ee:f2:
a9:94:25:4b:b2:dd:ab:e5:ce:1b:26:d4:71:4b:2b:
22:0a:14:6e:00:d7:d3:95:28:90:47:a4:3b:1d:07:
8a:78:cd:1b:e6:cc:4b:ca:09:22:46:f1:85:e7:f0:
e3:12:4d:ca:95:cd:8c:54:a1:86:56:70:c7:10:bd:
e2:e2:39:35:91:3b:25:d7:71:35:a6:1d:ca:da:58:
3f:6f:0e:2f:4e:b7:83:a4:4a:41:ff:43:2f:70:fc:
03:12:01:45:f2:ff:64:e8:9b:87:ec:0a:db:09:07:
fc:06:a2:c3:fa:21:ef:98:85:50:23:d1:11:a2:2b:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:71:B1:14:DA:81:3E:AB:2F:C6:E4:79:3F:0A:DE:47:96:F2:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/769bbfb1-8bac-342e-89ef-c9919a4f168d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:7a:3b:cc:02:1a:5b:ee:bc:d7:9f:9f:79:50:0e:21:0d:2d:
7a:7d:4d:b0:70:0b:a3:f5:31:ca:7c:f5:fe:14:8e:72:f6:d6:
21:42:31:ac:55:94:0a:ee:86:28:17:e3:23:04:f3:b1:4c:59:
98:36:5d:fb:fc:69:79:4d:d8:ed:a9:0e:3d:c4:f8:e8:80:d4:
27:73:3c:cf:9e:52:67:b7:93:07:c3:6c:c8:5d:63:54:06:50:
89:6b:53:db:69:6b:de:e0:97:10:54:15:ea:96:17:75:c4:dc:
5f:07:74:5e:fc:15:2a:80:a3:a1:d8:18:d7:21:0a:8f:58:b6:
5c:4e:33:2e:59:d5:6e:7b:f7:f4:13:b0:4f:1f:57:bb:d5:5e:
b6:d2:19:89:0c:da:85:97:ae:79:7d:ba:62:a5:51:a0:4c:26:
91:d1:f5:ed:49:04:1b:82:79:54:8d:43:11:bb:e4:10:71:35:
00:7c:ae:7f:2d:e0:cb:05:df:9d:f0:ba:5e:af:09:e4:c0:1c:
9e:14:fb:f3:7a:55:b2:5f:93:5f:67:f1:7f:48:d2:c4:36:c6:
91:9d:47:06:a4:8f:ce:a6:fc:66:65:0a:28:90:28:ac:3f:f2:
4a:8a:9a:52:08:04:09:4c:0d:6a:d2:ac:8b:99:1e:95:79:c7:
dc:d5:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:29 2025 by rpki-client