Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa
File: 96754f7b-9547-3947-beca-f13dd9962e64.roa (raw, json)
Hash identifier: 57yBcZnsdXj65EOpaOZOCgFqgFrxAG3IbNCmt0ttKtQ=
Subject key identifier: 53:F6:14:38:78:BF:2E:71:8F:19:44:6A:34:60:E0:EA:3F:1F:84:DD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D7168381F8E5EA88DB0A700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.28.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:68:38:1f:8e:5e:a8:8d:b0:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=a2e5ae2f-226f-4392-beab-8b2420e08b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:a2:94:3a:37:2e:be:33:6b:68:f8:36:66:
7c:80:29:58:81:3e:65:3f:41:2c:94:46:20:1d:84:
2a:c2:69:c3:42:e0:8d:e9:a6:71:f3:18:ee:dc:ad:
e5:26:4b:b9:c2:de:ad:6e:d2:b3:38:16:12:d6:fd:
d9:59:35:08:db:9e:c2:f8:7d:48:e1:19:68:74:e6:
b9:f5:e2:ac:d1:9f:67:73:58:a2:86:50:14:c6:e7:
4a:e5:21:9d:1d:8f:9a:21:a3:ff:f6:31:bb:d5:18:
7b:83:27:09:ed:0a:db:65:bc:cc:92:b3:27:8b:3f:
c6:85:ae:3e:8e:ee:d3:0a:12:77:f4:8b:7c:ce:57:
83:43:a6:ed:36:21:52:8c:02:97:6b:93:06:cc:15:
a2:6b:8f:ac:ad:85:6c:ed:f9:d3:40:38:65:73:84:
ba:3d:60:e2:c9:d0:00:e2:57:39:2f:01:80:e4:a2:
91:44:3d:d7:74:05:dc:45:4d:b9:dc:09:89:d4:46:
9c:5c:ff:3a:ec:a4:b9:d0:6a:d5:e8:1a:56:a4:8b:
f3:72:73:c0:04:80:9d:42:07:47:de:db:53:7e:36:
66:76:4b:19:59:d4:95:c1:df:24:d9:38:73:cb:a9:
7a:d2:3f:ab:d9:d2:e9:e9:28:d4:a4:b7:f4:26:fb:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F6:14:38:78:BF:2E:71:8F:19:44:6A:34:60:E0:EA:3F:1F:84:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ed:3b:ee:b6:f3:d9:46:15:99:ac:21:7f:53:c0:0d:0b:b1:
0e:ea:55:65:e6:ce:82:6c:b9:85:6b:1c:0a:29:c8:88:d5:bc:
d6:24:10:49:25:cc:b3:dd:d4:1a:0a:86:be:cc:12:c2:1a:1d:
8f:1c:3e:3e:f6:e2:bb:e4:d5:43:cd:7c:e0:8d:56:ac:6f:56:
93:95:c1:5a:a3:7a:8a:91:96:d3:ea:68:3e:50:c7:54:02:58:
a6:b9:a9:16:5d:66:6a:fa:91:5f:89:d3:b4:24:c5:f8:82:ec:
30:ed:ac:78:74:c5:7b:f2:87:c8:66:de:1f:e2:5e:5a:8c:65:
83:33:96:e0:7d:da:6b:ed:a4:93:c6:6b:57:3c:d5:2f:b4:d4:
9a:9c:90:61:fa:39:db:cf:90:00:3c:d7:f8:45:f0:e2:3b:24:
cc:b0:ba:8b:d8:0f:a5:48:e8:8e:f5:07:3f:2c:c6:03:0a:2d:
22:19:5c:52:8f:05:c2:60:00:5e:58:1f:25:51:dc:d6:fb:29:
3b:69:bc:04:82:2a:ce:c0:e3:0a:1e:fc:d7:6e:26:58:d5:c4:
a0:fc:ed:07:38:43:10:14:cf:92:c8:8d:48:cb:42:42:e9:00:
f4:c7:b5:d5:45:53:7f:02:e1:aa:65:3e:8c:2f:74:69:e5:87:
64:21:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:28:05 2025 by rpki-client