Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa
File: 87c35efc-c5c9-3946-95cf-99b65db08936.roa (raw, json)
Hash identifier: //PezCBLVxefAHpvxAmX92EIv2PKMIlmoBLanTqqphs=
Subject key identifier: E9:30:83:66:95:F1:67:F8:7C:A9:49:0C:37:C7:48:B1:2B:71:AF:3F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F6796EBEF35F235C7C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 198.211.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f6:79:6e:be:f3:5f:23:5c:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=3f65f25e-8b2c-45f9-9e41-5f1ccfd3bc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:16:a8:1c:07:0b:52:18:b6:99:84:ff:ee:
35:08:1b:40:df:36:51:8b:c6:72:29:2f:53:a1:69:
7c:d4:e2:10:c2:cc:a1:0f:f5:f2:d3:93:52:a9:18:
d1:9f:4e:04:ca:e6:2c:ad:cd:87:65:8e:43:35:93:
b7:81:30:4c:4d:1c:fe:79:a0:c3:09:69:18:01:0b:
aa:52:0d:4f:41:75:c8:3a:8e:11:d2:11:1d:b7:fc:
5a:e3:a5:53:e5:88:69:0e:66:13:cf:90:18:5b:21:
d9:83:09:e9:97:52:95:e0:e2:06:dd:48:94:4a:c5:
cf:08:b7:a7:74:70:c3:9c:5c:37:31:98:6a:75:49:
c0:01:96:01:98:65:bd:a4:0d:56:b7:9c:e2:d6:9b:
95:d1:33:6f:ff:06:45:77:c7:dc:dc:22:e8:33:e2:
68:1b:2a:03:b0:b5:58:c4:9e:6c:b2:8d:27:b2:04:
85:e5:2a:3e:97:5f:8c:0c:a2:5d:65:64:a7:99:f6:
00:cb:74:42:96:70:7d:2a:bf:d1:59:2f:46:e4:39:
96:a8:9c:2f:4b:9f:37:68:49:7d:32:4f:2d:e9:40:
7e:7c:f6:b3:e3:ee:5f:c3:04:2f:0f:ce:b3:c5:b1:
a2:e3:c9:36:3d:b2:19:66:77:47:07:8a:1a:62:ed:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:83:66:95:F1:67:F8:7C:A9:49:0C:37:C7:48:B1:2B:71:AF:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.211.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:81:05:00:af:5d:80:dd:37:b8:e2:32:57:cb:7a:39:44:67:
1d:9a:3a:11:dd:8a:85:b2:61:bb:a8:41:fb:d9:c0:36:4e:20:
e9:0f:b8:34:82:7e:1d:db:6f:ec:3c:b2:92:26:70:a4:e5:67:
49:e5:cf:65:d3:84:bd:4b:4a:47:cf:00:38:a4:0d:4e:d5:51:
30:ce:89:5f:68:39:8f:b8:fa:6c:94:18:f0:c9:14:f5:6a:8e:
b5:17:23:05:3c:ca:54:de:35:ca:a4:75:d0:9d:71:8d:78:04:
79:66:d5:8e:c9:33:d0:90:34:37:4b:c3:ef:91:39:af:0a:46:
f5:a4:c8:81:6d:10:27:ec:71:e6:09:e6:a9:f0:5b:84:16:25:
84:b9:a0:3e:19:6f:a0:ed:95:7a:82:48:b0:bd:25:1d:2b:c9:
4d:c8:a4:f3:9f:73:18:97:0e:cc:9e:ff:20:9b:23:e6:cf:d8:
f6:12:05:f7:e2:ec:57:a5:b3:02:78:ce:ad:db:1f:9f:69:8c:
1e:cd:8b:0f:64:46:8b:05:f9:e1:69:fe:96:33:13:65:d5:17:
f5:6a:14:da:5c:38:55:3e:8c:26:5a:c9:31:67:54:dc:cb:46:
30:d5:c0:2f:ce:6a:b0:42:1c:5d:ca:7f:27:2c:81:6c:94:02:
70:cc:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:55 2025 by rpki-client