Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/83b881ec-76e7-38e9-a361-1d3b2f332cb7.roa
File: 83b881ec-76e7-38e9-a361-1d3b2f332cb7.roa (raw, json)
Hash identifier: 57owZ4WXNt0/tyYsf2FcDyE/xwYypvqPA+0M6vux1Ks=
Subject key identifier: 97:CF:5F:E4:87:93:55:E1:C9:AF:5F:82:9C:B8:CC:BE:30:33:63:FE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EFB1A51F8F15BC3D1C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/83b881ec-76e7-38e9-a361-1d3b2f332cb7.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.31.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ef:b1:a5:1f:8f:15:bc:3d:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=bbe134df-fe0e-4e23-a46b-44384aead504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:62:15:62:3e:03:dc:7a:14:14:05:35:73:
9b:ca:a2:b6:a5:77:0f:4b:bf:c5:03:c6:9d:3c:68:
c7:89:f2:cd:54:37:87:c5:ec:e9:e7:c5:6d:63:c7:
80:2a:79:ff:b9:4e:70:dd:fc:dc:88:02:8f:42:4d:
5b:2b:08:a8:ab:ee:3b:ca:54:00:89:34:c2:2e:2b:
6e:a6:60:ca:55:97:a6:80:11:0f:e5:4f:39:c5:1a:
44:94:dd:59:2c:7f:3b:d9:1e:22:5b:fa:e7:c0:5b:
09:ab:58:8f:4c:ac:fe:15:e5:f1:3f:f3:c7:8e:2c:
d2:40:82:fc:98:e1:08:ac:e7:e0:ea:d6:9e:85:ca:
1f:45:22:47:50:b9:85:50:2f:ab:a3:25:31:e1:be:
49:3d:30:d0:96:7e:6b:06:f0:fd:9e:54:62:52:eb:
3f:2f:cf:d0:36:c9:dd:58:3a:40:6f:bf:3d:93:4e:
7a:9d:fc:e3:b8:0a:5e:8d:e8:4b:ac:2b:7c:bc:00:
9c:51:8b:77:73:92:36:fe:53:e4:1a:29:aa:75:e1:
2e:39:62:16:27:7a:70:d3:f4:e8:41:1c:95:e4:99:
9a:5f:79:d3:6a:a5:4f:10:d8:f5:b1:50:05:e8:86:
7c:ee:73:9f:fe:77:55:d2:9d:45:87:e9:9d:66:92:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:5F:E4:87:93:55:E1:C9:AF:5F:82:9C:B8:CC:BE:30:33:63:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/83b881ec-76e7-38e9-a361-1d3b2f332cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:6b:2e:e7:55:76:8e:41:e5:63:19:1f:26:85:84:a8:3e:31:
ca:b8:26:a4:93:c1:ec:79:f9:9f:14:5c:45:c9:af:0d:09:03:
d2:26:15:5b:71:84:ae:6c:46:34:e5:a7:b6:ba:07:02:e8:c7:
8d:ab:39:b3:87:37:79:28:c6:86:bd:ca:c4:eb:9c:fa:8e:10:
ff:91:fe:08:e4:32:51:63:86:f1:86:db:9a:3f:4c:25:1f:1a:
e5:e2:10:35:03:16:e8:73:d5:73:72:88:3c:93:4a:c4:42:61:
0b:e1:f4:cf:c1:94:ba:61:03:24:f3:b0:f2:64:79:81:f3:d9:
81:c6:73:77:ca:16:3b:57:fa:8c:f8:5a:7a:25:5e:71:e4:bc:
39:76:1e:79:62:10:a4:f3:39:84:51:ba:84:fb:ea:3b:b1:a8:
67:19:fa:5f:ca:dc:81:30:62:22:8f:c1:9a:6a:3d:91:4b:6c:
eb:23:cb:c2:07:fd:73:59:0e:38:92:41:7f:56:a7:2a:24:68:
9b:90:9e:a9:12:9b:73:a8:31:78:04:74:ff:36:e2:e4:a8:a1:
a7:6f:e2:9d:c0:b8:ed:d6:a5:0a:a0:28:e6:7d:4c:43:70:d7:
40:f6:ee:fc:55:ae:ae:3e:75:af:79:6a:49:07:3f:36:f5:0c:
1f:e8:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:25 2025 by rpki-client