Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa
File: 7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa (raw, json)
Hash identifier: 2zA5VAUf0JJNFZANt5ff6Nti7MqRDRKuusD5FdRFnWo=
Subject key identifier: 55:0A:10:00:2E:3E:69:A8:95:65:EA:42:81:9D:A4:18:B0:65:9B:EF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112458FA62DDF59B880700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 199.35.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:24:58:fa:62:dd:f5:9b:88:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=9b8b6f10-8d3c-4575-9902-9bc4462e8ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:01:eb:bf:35:24:66:60:57:1e:a4:95:33:
6f:c7:01:52:74:35:5d:1e:8c:9d:54:61:41:44:d4:
f7:02:40:c7:fc:92:f9:20:05:b1:c5:3e:1f:b0:9d:
9a:7e:6c:5f:d2:53:97:51:86:33:d1:be:d8:d3:c7:
c0:c4:95:73:23:66:5f:2e:d4:15:a4:22:21:43:55:
33:62:23:f3:9c:8d:82:d5:0a:34:7f:b4:0c:21:cc:
89:89:9b:54:b6:65:c7:4e:85:36:35:ea:51:7d:90:
57:31:9c:b5:49:fc:ce:19:f5:25:d3:e0:1a:84:53:
65:68:77:c4:c5:5d:94:9b:f7:41:fb:82:3f:b6:2e:
91:63:82:c2:1f:17:47:5b:e5:46:31:4d:cc:14:17:
aa:c9:e4:f9:42:b5:9a:26:b4:31:7b:c6:58:0b:fc:
24:f5:aa:63:da:4a:b2:fb:a4:fa:78:1a:6e:09:ce:
38:2c:d4:77:42:32:3b:d3:0a:65:77:35:d5:86:fe:
02:75:1f:46:c1:e8:1a:16:e1:1d:8a:f2:a9:1c:cc:
6c:8a:5c:42:e5:b7:5e:0f:ce:84:24:4b:1c:fa:74:
1f:a6:4a:28:f2:88:d1:c5:a2:44:4a:57:7a:73:61:
6a:9a:57:36:ac:24:2a:7c:8f:84:08:f9:24:9f:66:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:10:00:2E:3E:69:A8:95:65:EA:42:81:9D:A4:18:B0:65:9B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.35.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:6f:2a:bb:c5:f9:9d:dd:98:2f:71:91:9e:e4:ef:68:ed:d4:
8c:0a:cf:c5:16:9d:3b:e7:d1:bc:9e:2c:25:74:a4:e9:32:93:
99:5a:f7:f7:f8:18:9f:ad:38:dc:14:2b:87:b1:1e:b0:b3:e5:
c4:ce:7b:51:8e:1a:90:56:9d:e3:33:9c:95:bc:d6:69:63:89:
88:4a:02:a0:c9:48:eb:2c:51:42:7f:86:ed:18:db:60:36:b4:
da:29:34:c7:bd:1c:5c:58:fd:b9:42:de:ef:78:1e:f9:fb:6d:
4e:39:0c:57:2e:81:15:99:96:9a:f5:11:11:3a:fc:ee:bc:24:
bd:29:fe:d1:2e:f7:ba:50:6d:60:13:43:f3:32:ae:25:ae:08:
44:93:8d:1b:df:5b:5b:75:25:d8:eb:0c:b4:42:2f:11:87:34:
42:80:d7:98:d1:17:e2:46:b9:1e:f1:f0:41:8e:24:ff:29:73:
46:a2:18:29:00:19:86:13:c2:fb:45:36:9f:e9:71:73:39:97:
7e:e0:7d:15:10:65:d5:01:f4:bd:fd:eb:f9:2c:45:2f:f4:d5:
53:5f:d4:4b:ff:cd:35:25:9e:5e:5b:26:90:71:db:45:14:2d:
ad:76:e9:75:99:fa:d1:c4:d0:4d:19:f2:81:79:3c:af:a3:3f:
3a:3c:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:52 2025 by rpki-client