Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80af4de0-1bfa-3402-afbd-21dbddda1981.roa
File: 80af4de0-1bfa-3402-afbd-21dbddda1981.roa (raw, json)
Hash identifier: 54cbP8ooslSCwYW0/oyj+XpcjWXRF+iMzgrXUBj/ZI0=
Subject key identifier: 2A:1E:1A:0B:01:A8:88:7A:CE:9B:B5:51:D4:8D:42:DD:D9:E3:9A:AA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584957F4113E4D445BE545A4B180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80af4de0-1bfa-3402-afbd-21dbddda1981.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 151.213.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:11:3e:4d:44:5b:e5:45:a4:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=e9a369d6-e655-40a8-96fd-37e27d7a2f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:d3:67:db:fb:81:b2:0c:d7:25:42:32:dd:
94:10:ef:01:83:49:72:c1:4b:9e:43:71:69:9d:05:
fb:7b:84:3b:e7:14:78:f0:ca:ad:6c:a8:36:74:24:
21:42:93:32:9b:a5:10:ef:ac:f2:cc:ec:34:05:ba:
a8:b6:62:cd:57:a5:31:f1:e2:ef:c4:8f:67:bd:dd:
64:8d:ac:00:a9:32:8e:c9:0f:c4:5c:8f:38:5d:92:
77:90:49:f1:c4:c0:e0:d3:93:5f:65:fa:ee:e8:5e:
fb:0b:4b:14:b8:d5:8c:94:59:79:7d:78:94:cb:18:
c3:57:7d:91:02:4d:d8:7c:da:75:96:18:1c:ef:56:
d4:d2:d4:9d:c3:47:83:9e:d8:ee:58:9c:48:84:b3:
c2:89:b2:6e:46:bb:ab:dd:dd:1d:29:d4:2b:ab:04:
f3:d4:0d:92:ad:9d:65:77:b9:ff:03:53:2c:5b:da:
8f:07:77:fb:17:07:04:1e:ef:3d:66:42:13:39:52:
08:04:bb:ea:4b:db:d4:2d:1e:6a:12:59:00:8e:92:
db:99:f0:6a:7c:de:6d:40:ba:60:b8:7c:fb:99:8f:
72:1d:26:98:d6:c4:bb:f6:48:71:a8:c7:7a:d5:73:
ed:10:ff:fe:1e:c9:fa:5a:b0:34:8c:e6:2a:6d:3d:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:1A:0B:01:A8:88:7A:CE:9B:B5:51:D4:8D:42:DD:D9:E3:9A:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80af4de0-1bfa-3402-afbd-21dbddda1981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:36:b7:29:81:b9:a7:b7:5b:3a:1e:01:ba:17:2a:cd:ae:d5:
48:fb:8c:70:45:a2:d9:d7:65:f6:44:4d:09:fd:e7:e6:b0:08:
f2:78:b7:18:8f:10:91:42:2e:b4:98:eb:8c:bd:ba:27:c9:a9:
01:d1:96:70:e6:33:0d:db:a6:39:3a:a2:40:22:32:d8:6b:53:
79:19:76:49:c0:f1:23:13:6d:18:f3:08:ac:31:d2:2a:46:5c:
ec:f0:48:e0:ee:3d:2e:e1:29:44:58:a8:a3:ed:7c:27:d1:f3:
b9:82:9f:19:67:85:15:8b:0c:ac:ef:33:9c:85:8c:15:8e:bb:
66:1e:cc:df:cb:86:70:d3:fd:48:30:54:0f:46:61:80:f7:22:
d9:cf:9f:5b:ba:6b:66:38:b9:7a:01:1c:b7:f9:9d:0f:10:6f:
6f:84:78:e5:f1:1e:b6:2e:f3:6a:55:9a:95:cd:f2:f2:f9:bf:
60:59:13:0c:65:ed:79:6d:c0:e5:2f:8b:09:f1:57:27:e5:92:
7a:38:40:51:5d:ef:87:c7:60:e8:96:7d:90:0c:65:cc:89:d0:
22:dc:d4:11:49:13:ba:77:a4:fc:b5:fd:ab:57:21:45:1f:31:
81:57:7e:8a:4b:10:65:49:16:7e:81:2b:77:3e:3a:c3:44:e2:
c3:e2:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:46 2025 by rpki-client