Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa
File: 96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa (raw, json)
Hash identifier: 3ok2fP9/bv4uJwOl9IcE6j7WfhZBhKzMYPAmltTyGkQ=
Subject key identifier: 4B:ED:AE:C9:24:41:95:E3:8E:A1:0D:0C:D9:47:F6:E2:AF:A1:04:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112B707F77FA49D0FEF500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2604:cb00:3100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2b:70:7f:77:fa:49:d0:fe:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=89874bd4-fc84-439a-93a0-22f12c11bb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:71:97:33:26:29:52:9b:f2:35:ba:30:a6:
25:f6:19:1f:b2:fb:5d:10:fc:b8:3f:c5:2a:d4:bc:
40:79:2c:f6:64:65:a5:6c:31:11:1f:78:95:a1:96:
d6:85:bf:4d:8d:ed:34:3c:40:44:c8:d3:d7:56:fd:
0c:07:fc:f7:a0:8e:c2:77:58:15:47:70:1f:bf:03:
10:4a:73:d7:d8:3c:49:67:88:06:14:a3:1a:85:55:
cd:75:17:12:d5:05:c6:73:70:33:3b:7f:00:3f:05:
25:6b:42:71:b1:01:8b:a0:47:0e:d1:a4:bd:8e:7c:
0c:fb:f3:31:45:77:b7:9a:8b:85:a5:54:61:a7:ad:
9d:a8:d3:a5:e4:1f:94:4e:dd:0f:e4:88:5d:ae:70:
2d:33:46:4e:d8:58:64:eb:ed:15:a2:b6:59:cb:35:
42:f4:13:e2:e6:2b:f3:6a:02:56:37:1e:f8:65:e6:
c3:77:36:16:29:a9:c1:a5:0b:58:de:3d:79:7b:a4:
86:b8:e8:b5:72:5c:37:ba:e4:e1:6a:91:ac:f3:6b:
d6:1c:2e:0c:2a:77:7c:c5:17:99:12:d2:dd:88:39:
39:c7:25:d0:ea:b2:d4:a1:68:51:7c:07:e5:0c:f8:
90:a1:d0:fe:eb:e2:1b:61:96:b8:51:f6:cd:d4:2e:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:AE:C9:24:41:95:E3:8E:A1:0D:0C:D9:47:F6:E2:AF:A1:04:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b1:d7:8a:8a:8c:ae:c8:55:cf:4a:33:a2:2d:75:7d:95:3c:
ae:d1:05:af:81:08:b6:f7:f5:c4:76:e7:49:f3:ca:b2:72:84:
7c:38:07:16:2f:da:dc:0e:fa:ec:35:a2:45:88:da:13:71:8b:
eb:7c:66:5c:61:ba:78:c2:ac:02:8c:b7:ac:f9:2c:ec:6d:65:
87:8c:d4:04:b0:ea:44:ff:f6:38:c4:48:2f:20:07:95:8e:39:
d2:92:15:b6:22:6b:8c:d6:35:ee:e8:d3:4a:e7:34:8c:93:12:
71:fb:0d:8b:04:0f:a4:d2:ea:40:29:16:37:28:97:3a:29:c2:
c6:df:d6:00:2d:fb:05:be:9e:7a:07:6a:62:6d:3d:39:28:3d:
47:ab:81:82:55:d5:e5:c5:2b:47:6b:15:f0:20:a9:07:61:a6:
39:0b:8c:8f:a8:fa:c4:49:ae:fc:96:d9:ac:b0:c6:c0:f3:87:
fd:02:c6:16:3d:b8:69:b5:7c:6a:8d:d4:60:40:ce:8b:d1:51:
59:94:4c:85:07:04:2e:78:ed:f1:ff:49:fa:37:3a:93:9d:6d:
1a:6c:a1:d8:89:1b:02:7f:ef:37:45:0c:ed:06:d2:9d:16:22:
6b:6d:79:d3:ab:a1:68:1f:9f:28:8e:47:b9:01:67:3a:04:db:
ef:d1:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:32 2025 by rpki-client