Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fdbd9de-c34d-365d-907c-c36ecd8de62c.roa
File: 8fdbd9de-c34d-365d-907c-c36ecd8de62c.roa (raw, json)
Hash identifier: cfJl6AtsLMzjxOPSYS43CR85ej14RlI+Lrcxm0c917Y=
Subject key identifier: 65:61:02:21:FD:0E:65:5F:F3:6D:57:7B:56:56:7E:9E:0F:CA:04:78
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285846434A5326901CD0C9EDB24300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fdbd9de-c34d-365d-907c-c36ecd8de62c.roa
Signing time: Wed 19 Jun 2024 13:00:34 +0000
ROA not before: Wed 19 Jun 2024 13:00:34 +0000
ROA not after: Tue 17 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 71.29.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:43:4a:53:26:90:1c:d0:c9:ed:b2:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 19 13:00:34 2024 GMT
Not After : Sep 17 13:00:34 2024 GMT
Subject: CN=b97f9148-31a8-4163-bc61-22f918c546a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:a7:55:e4:a5:2d:0c:46:20:33:b7:bf:8e:
81:e5:29:77:69:54:e5:09:97:ad:73:ae:82:1f:72:
aa:0e:50:a3:34:d9:a0:bf:6d:20:4f:9f:91:df:16:
e5:90:38:0b:67:fc:ed:e2:3d:22:91:91:fe:1e:01:
3c:0b:23:7b:fe:e2:7d:3b:19:75:c8:f5:03:2d:29:
81:7b:9c:ec:37:09:46:bd:ea:93:79:ac:07:3a:d3:
4c:59:2b:1a:cf:8c:22:c5:a3:b9:a9:1a:b1:af:14:
a2:43:b6:70:db:72:3a:69:0e:20:02:c3:41:6b:9f:
58:1d:8c:48:ab:e9:96:58:1c:6e:86:6f:a9:bd:34:
1c:f5:35:34:fa:36:9d:01:a1:e1:8c:ae:3f:82:96:
c0:fb:fb:9c:5d:86:d3:88:e0:70:b4:da:34:e2:7f:
94:c7:14:c4:51:51:de:1f:a8:da:9f:1c:df:33:96:
1c:e8:ab:3d:e7:72:29:ab:9d:22:d7:78:2b:ab:65:
d5:ee:e6:0b:81:31:87:d3:1e:d7:29:0a:74:fb:fe:
1d:78:39:5e:26:20:a9:cb:10:85:9a:b9:c3:16:df:
12:13:c1:65:ef:fe:14:ea:cc:41:bc:e6:5f:b2:85:
7d:9d:5e:6b:93:85:bb:d0:7e:8b:10:ac:86:35:ba:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:02:21:FD:0E:65:5F:F3:6D:57:7B:56:56:7E:9E:0F:CA:04:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fdbd9de-c34d-365d-907c-c36ecd8de62c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:cb:90:dc:66:71:94:0d:ae:96:05:89:69:05:45:96:df:8c:
a7:b1:f7:07:5d:cc:30:78:a1:ef:85:f5:de:8d:6c:e3:35:0a:
16:07:d4:eb:4d:24:af:ee:42:fc:a5:b7:43:40:91:70:b2:71:
7e:c4:06:7c:64:7c:a9:99:a8:73:00:7d:51:e3:a5:81:2c:6e:
b2:e9:da:c2:c1:dd:be:75:fd:64:a6:07:52:52:ca:d5:86:9a:
61:3a:ea:fb:bb:a1:c1:ef:38:dd:2b:30:4c:11:5a:f2:4a:f7:
1d:31:8f:65:55:6e:d2:f4:54:5e:1d:b0:82:b8:f9:5d:b1:a2:
20:e4:7c:b0:a4:9c:7f:6a:91:8a:c2:2a:d1:57:c8:ee:d4:56:
c0:cb:ff:a4:fd:18:32:dc:7d:5b:a6:ce:20:22:29:79:b2:4b:
a5:ee:f7:9d:17:73:ad:09:c9:f1:b5:1f:fb:57:56:ed:55:02:
f4:6d:e7:05:d6:b7:b2:e8:ec:bb:08:ae:75:88:8a:90:b1:42:
f9:25:94:35:fe:06:50:4b:61:40:6d:70:da:54:d3:3d:36:31:
1e:5a:f3:c1:d8:7f:a9:a3:de:d3:6c:66:73:04:47:7e:58:82:
4e:f5:5b:37:ac:c4:9f:36:88:07:94:78:e9:b2:76:46:f0:1c:
9f:80:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:26 2025 by rpki-client