Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa
File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json)
Hash identifier: mRIg4kcBTih1kjdIp3pm1DkE6w0KYgIYDnogQVPJlnA=
Subject key identifier: 73:5B:FA:34:F7:F2:B6:88:A0:AF:BD:BB:33:C2:43:9B:02:0C:17:F2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA9366298EAD52BC6A7700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa
Signing time: Thu 20 Feb 2025 18:16:12 +0000
ROA not before: Thu 20 Feb 2025 18:16:12 +0000
ROA not after: Wed 21 May 2025 17:16:12 +0000
asID: 7029
IP address blocks: 173.189.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:93:66:29:8e:ad:52:bc:6a:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:16:12 2025 GMT
Not After : May 21 17:16:12 2025 GMT
Subject: CN=c7a103ef-4b34-45d1-ae48-b7468bda6129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:27:bf:e8:35:eb:5d:1c:bd:a0:4a:93:9d:
4a:61:d1:77:7d:18:a5:a0:8d:38:8a:cc:57:74:fb:
f2:23:68:68:4f:41:90:c5:18:79:2d:2e:a9:03:7e:
0d:66:15:f2:81:e4:07:34:0d:9c:a7:6e:94:d2:d1:
00:81:be:de:0c:a3:8f:f0:de:ee:34:1b:4c:a3:93:
5d:7e:d4:30:bf:91:8a:b1:2d:ac:e8:e6:8c:b5:6e:
84:f3:ab:b2:8f:5f:21:65:97:31:cd:de:3e:17:ce:
19:62:1c:4a:61:f8:3d:d6:a5:30:09:71:b4:0c:54:
9f:96:3f:e5:1a:d8:87:db:6b:8b:ee:34:8b:7f:ac:
e4:b3:9d:b3:e5:4a:86:01:c8:8e:8f:e8:f9:33:f1:
84:6b:17:d2:a8:70:f9:9a:ff:eb:11:44:c1:eb:44:
5b:c5:0e:fc:e5:81:bd:c0:f4:02:04:bf:38:4e:87:
e6:ac:b8:76:ec:c4:2c:7f:22:30:88:03:bc:41:a9:
74:75:0d:41:29:28:ac:df:59:f3:4a:17:8c:fb:f9:
82:ca:91:62:3e:d3:b7:c3:f2:63:fa:76:ad:bc:3b:
14:90:e1:4a:34:ff:55:1e:bf:0b:ac:01:52:56:fc:
21:f7:31:d2:ee:64:98:c9:d5:ce:2a:ba:7a:87:ea:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:FA:34:F7:F2:B6:88:A0:AF:BD:BB:33:C2:43:9B:02:0C:17:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:61:83:84:73:55:f2:04:b0:f7:86:7d:32:4d:b8:80:9e:c4:
54:b0:76:eb:7d:ac:9e:4d:16:6a:92:5d:49:63:43:b7:b2:57:
0d:97:80:d6:bf:a2:5a:5f:97:19:7c:66:18:e0:07:7c:a5:64:
ce:e1:aa:c3:21:db:59:8d:69:51:7d:56:54:2c:41:b1:75:d1:
f0:65:97:f1:40:02:db:c0:88:43:62:b4:c9:eb:66:90:5b:a6:
cf:07:e7:6c:cb:70:63:bb:6c:70:50:53:25:c1:25:6a:f2:4d:
82:20:d9:0d:05:a8:48:2f:ff:e7:bc:66:3e:d9:c4:3a:84:42:
1c:7a:51:c0:8d:95:9e:3a:39:e3:23:af:c8:41:6f:c3:04:ba:
67:ee:da:57:69:61:3c:08:f7:64:10:bb:2f:a0:d0:d2:df:a6:
1e:ba:e1:4d:37:d1:5c:4d:bb:cf:71:86:09:fd:78:98:ef:c5:
c8:a0:0d:eb:c0:b2:b3:35:1d:5b:92:a8:29:7e:44:47:52:cf:
0f:b1:14:96:e8:b9:74:06:03:f5:01:c4:b1:ce:53:c0:f1:a9:
0f:f8:91:03:d2:7f:db:8c:30:a9:cd:a9:b9:09:e0:34:05:99:
f9:1d:64:33:d9:0c:cb:fe:6b:c4:a5:b7:9d:7c:c9:69:0a:a3:
ce:d8:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:52 2025 by rpki-client