Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa
File: 88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa (raw, json)
Hash identifier: LXxCmzSmPM9GWRsM+02gTYwbXBGV/AwLZP/8oqDPXuM=
Subject key identifier: 78:2D:02:5B:C8:3A:62:37:F3:61:70:0E:E7:6A:72:1F:55:AE:86:6E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA35FF1F46BBA4880DE1D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa
Signing time: Thu 20 Feb 2025 18:15:28 +0000
ROA not before: Thu 20 Feb 2025 18:15:28 +0000
ROA not after: Wed 21 May 2025 17:15:28 +0000
asID: 7029
IP address blocks: 71.29.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:35:ff:1f:46:bb:a4:88:0d:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:28 2025 GMT
Not After : May 21 17:15:28 2025 GMT
Subject: CN=e656b167-78bc-413c-a39e-0b018a469c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:57:71:a2:72:0d:70:6b:58:6c:dc:41:08:
4f:5d:65:68:7f:1d:0b:44:de:86:01:78:83:97:f5:
f5:be:1a:ee:c2:f8:4e:cb:ff:a9:4a:04:67:7e:4f:
6d:2a:da:f4:22:a6:d4:94:1e:1a:40:49:c6:f7:72:
9a:31:46:9e:51:21:d7:9a:ac:6f:d9:5c:21:1b:4a:
1b:13:5c:e4:0f:4b:8e:cc:64:85:83:5c:43:e6:87:
fa:ef:7a:0e:f1:75:bb:0a:32:86:e1:f2:b2:c9:9a:
82:b4:f3:6c:52:63:fa:b8:dd:ef:62:73:58:f6:5a:
bc:94:c3:55:c1:e6:37:6f:6c:4c:f9:3b:f5:b3:35:
63:22:56:ce:c5:cc:dc:bb:aa:ef:bf:ed:6b:2b:06:
c6:f5:c6:16:aa:b2:b8:d1:46:0e:b0:dc:78:83:8a:
57:1e:66:a0:23:78:d0:31:2a:16:56:47:12:a7:9a:
cd:b5:f6:d8:b9:98:5d:99:e9:ae:2f:46:10:f4:20:
ae:54:ad:08:c5:32:66:8e:40:57:2d:05:6c:e5:d5:
09:32:d6:b7:e1:00:02:d5:45:48:2a:fa:3d:05:df:
d6:e2:72:39:d1:92:7d:89:5b:d1:7b:bb:d7:7d:00:
12:be:91:2e:3c:de:59:3d:76:de:7f:12:55:83:e7:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:02:5B:C8:3A:62:37:F3:61:70:0E:E7:6A:72:1F:55:AE:86:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:0c:85:37:2f:92:09:5e:61:75:47:dc:7f:d8:87:0b:8a:5c:
44:ca:a0:b6:24:08:4e:07:ad:75:12:cd:2e:a6:fd:36:f7:4b:
9e:3c:af:3a:6e:1e:f6:22:e1:6c:b8:be:aa:5d:94:ea:ce:49:
18:ad:73:5c:73:3e:42:b3:76:97:a1:ae:d5:ea:a0:c3:7c:00:
d3:5a:ad:5e:e2:7e:00:d2:cb:4f:03:7f:d2:14:78:15:11:2b:
e2:86:7c:19:e9:c7:a4:c6:19:c0:bc:82:d4:6b:67:f8:4b:73:
c7:58:63:d9:26:82:b6:de:eb:a4:82:d2:68:80:57:f3:22:07:
1c:d3:ba:34:e0:98:c4:c6:dd:13:4b:c6:b0:c5:94:d1:a7:e9:
5f:b8:ad:e3:13:f9:a8:36:13:90:a7:75:99:81:fa:53:65:09:
b8:84:2f:ab:e3:bf:6e:96:2f:ed:7a:ca:32:a2:72:0b:c6:16:
f7:0f:72:06:c2:a7:06:f2:19:fb:dc:d7:f8:8b:37:0e:53:2d:
88:50:56:ec:8c:dc:14:87:e0:62:ef:9f:47:46:ea:64:80:14:
ad:d7:bc:29:cb:cf:95:f3:29:9a:05:19:73:c6:32:db:9a:d1:
37:95:be:ad:2a:05:c2:78:3e:df:a9:29:94:90:d0:66:11:90:
4c:64:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:14:47 2025 by rpki-client