Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa
File: 7858d667-e6fa-3f96-bdaf-8712e64c5159.roa (raw, json)
Hash identifier: 5CNafn9Aa9kR435zy8Exqx1KK9eY+jWcXy0fv1VBSds=
Subject key identifier: 4C:FA:45:35:CE:29:C5:D4:59:E1:B4:41:02:4E:AF:CE:D3:B0:66:01
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB937A8FADDD9E4018482C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa
Signing time: Thu 06 Feb 2025 18:13:08 +0000
ROA not before: Thu 06 Feb 2025 18:13:08 +0000
ROA not after: Wed 07 May 2025 17:13:08 +0000
asID: 7029
IP address blocks: 40.142.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:93:7a:8f:ad:dd:9e:40:18:48:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:13:08 2025 GMT
Not After : May 7 17:13:08 2025 GMT
Subject: CN=40975b38-2609-43fc-9ad0-2d74a29d5af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:49:c6:08:79:f2:9b:dc:a9:bd:1e:8c:01:
0f:52:15:37:c3:74:6a:a9:0e:27:83:ca:58:93:85:
33:0f:fd:37:e0:94:b5:ed:ec:e0:e4:ef:f8:c9:73:
fd:e5:f2:be:12:f1:ef:65:51:fc:66:27:0b:2f:b6:
42:c0:b0:26:74:f4:02:56:42:0d:b8:ff:b4:d5:ef:
1c:0b:b8:b4:09:14:09:61:b9:fa:79:9f:9c:1e:38:
0f:b5:52:51:e8:be:63:26:96:fd:f0:7b:ad:76:57:
0c:b5:0c:7f:9f:b6:27:ee:09:bf:94:7e:f7:bf:0c:
95:6b:27:a7:b2:95:d3:01:91:00:b1:b7:a5:2e:65:
0e:f6:ed:51:75:f0:b9:59:04:b4:da:a3:c9:e2:29:
b2:fb:c5:ae:74:d2:a9:64:64:0c:80:80:84:c4:9e:
aa:96:dd:1f:4c:76:14:3e:3d:94:6a:5d:fe:52:ca:
6b:25:3c:71:5c:77:fc:04:51:16:22:5a:2c:1d:b1:
64:0e:38:cd:16:e3:47:3e:35:7e:8e:3b:d9:b6:01:
55:7e:5f:97:34:75:7f:f2:d6:b9:6b:e1:c1:48:af:
d1:db:a9:97:66:ad:41:fd:8b:4b:c1:b6:dd:2b:e5:
a3:ca:9c:95:2a:a5:2e:54:93:e8:b7:39:03:78:aa:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:45:35:CE:29:C5:D4:59:E1:B4:41:02:4E:AF:CE:D3:B0:66:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:dd:0b:05:18:b8:59:2a:30:7e:9a:3c:86:7c:99:cc:e9:e3:
df:74:51:40:af:63:3a:c5:f5:6d:55:5d:78:b7:3b:8c:4f:f9:
40:fb:b4:45:cd:26:2b:8e:08:e8:00:d0:4a:31:e1:a5:c4:1c:
79:b5:93:c8:ad:dc:ad:4e:f6:0a:36:b6:5e:23:ec:08:4c:2c:
15:3a:24:59:ff:28:c3:11:36:dd:6a:ba:e7:d8:77:25:54:31:
43:8e:24:2a:ec:95:7c:87:a6:77:08:ee:b4:84:3a:c4:68:2c:
49:e7:d3:66:04:94:dc:1a:66:af:c8:b2:31:62:2d:1e:20:db:
13:54:32:00:28:60:c1:b4:fc:a4:87:dc:e5:8f:c5:62:3d:cb:
45:a0:03:c2:1e:cf:0c:a7:0a:e1:de:3a:b3:b8:3d:75:0c:eb:
a3:0d:d2:ee:20:22:b5:4a:d2:d8:3c:1c:fe:91:39:b0:54:67:
b5:6a:16:d7:f5:af:97:d5:04:a6:3a:13:13:8b:d3:cb:df:d1:
9c:a7:df:cb:84:15:17:c2:e3:0b:bc:f9:d9:c5:20:0b:5d:8d:
f1:1f:6d:2f:25:83:10:27:df:90:ce:11:b9:6c:88:bf:04:be:
bb:4b:53:18:bf:a7:f9:d7:74:d8:13:e6:81:39:a8:a9:97:16:
68:e4:d4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:50 2025 by rpki-client