Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa
File: 91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa (raw, json)
Hash identifier: /vm0JaZSngC5NZ6E5Jfdh7PlMkhl1qwltMsXywbllzs=
Subject key identifier: 03:94:82:D2:A4:98:F8:1D:15:81:6C:8B:82:4A:D9:6D:D1:C0:71:41
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211076198F2B98E2F12E480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 394183
IP address blocks: 64.199.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:07:61:98:f2:b9:8e:2f:12:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=49a3810a-ee29-4fcf-a9ae-a274a4d4de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:cb:5c:cd:24:7b:33:49:39:97:bb:0a:0b:
b1:e3:97:b3:98:9b:fc:8d:45:bd:c6:7d:91:94:cb:
f5:02:13:77:7f:0b:69:40:4a:3a:40:c4:3a:23:53:
34:9f:88:4d:f7:87:c8:8c:c2:5b:ca:38:d0:5a:73:
47:81:d5:c9:01:99:46:1c:cf:06:4b:50:3b:fa:d3:
5b:13:07:9d:1d:3a:c9:49:a2:67:39:ca:bf:73:4c:
ed:57:82:c6:ed:21:f9:a3:3c:5f:ec:d4:4f:e3:99:
42:39:29:41:17:11:72:ef:42:ac:59:45:d6:44:12:
85:a7:39:5c:f9:01:5c:8f:8b:65:86:1c:c5:22:15:
b2:cb:7d:77:25:e5:96:82:1a:1d:2a:ed:ed:9d:68:
36:b8:b8:ba:bf:a9:73:82:3c:05:81:3d:2b:2f:e5:
39:21:f8:e2:61:1f:fa:20:bc:cf:f7:ca:dd:8a:72:
c5:da:fd:cc:9d:8a:63:44:f6:e0:50:7a:d5:f9:d5:
8a:46:f5:c4:05:a6:27:75:bc:ed:ca:2b:25:50:ae:
91:25:07:dd:16:ce:cf:f8:48:c0:9b:bb:3e:f9:55:
62:92:37:46:1d:15:16:6e:37:52:6d:d0:18:30:8e:
c6:f6:32:a1:1b:56:c7:6d:49:42:8d:8f:f8:d7:48:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:82:D2:A4:98:F8:1D:15:81:6C:8B:82:4A:D9:6D:D1:C0:71:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.199.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ee:fa:b8:5d:4a:0c:49:cf:90:ba:c0:24:25:f7:1f:ae:6f:
b3:4c:3a:8f:a0:21:eb:f9:f1:90:63:7e:74:5c:27:33:05:76:
ed:81:64:4e:07:af:71:a7:d5:94:91:29:c6:aa:b2:06:70:33:
1c:bf:99:3c:97:15:b8:a8:cd:13:ff:25:6e:64:cf:10:6b:63:
c2:a8:c0:1d:e1:8e:ff:9a:a3:fc:f1:16:6b:d0:7f:5d:e3:62:
34:18:77:ac:fc:a4:7a:2a:2f:b8:62:fe:fc:6f:5e:c2:74:fb:
7f:26:a0:77:e8:6e:5b:97:c7:5d:d5:0b:74:43:5a:83:6e:94:
ee:85:23:8e:61:0e:73:09:40:f2:ec:16:01:55:db:f2:a3:0f:
b3:56:98:69:68:7c:18:bd:86:90:18:49:9a:9a:b1:9c:ea:ce:
1d:d8:e2:92:d6:0d:9a:72:6f:95:2d:47:ed:5c:06:de:f7:3c:
32:f8:28:21:fd:74:19:e1:da:c8:be:1e:a3:a5:4d:db:8c:ca:
89:a4:47:ec:6d:37:a5:a0:23:ae:4d:c0:f2:47:b4:23:a7:cf:
4d:09:75:be:da:bc:dd:e0:2e:8d:8b:8d:c0:1e:fd:82:af:54:
e0:b3:f0:8e:35:9a:bd:12:4b:ec:32:6d:80:fe:c8:76:fb:62:
80:46:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:28 2025 by rpki-client