Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa
File: 9b1728fc-c881-33c6-a899-014e97c3f766.roa (raw, json)
Hash identifier: 2miZ89/4W4OZXAtp3SJVC68evANWmepmVlW4NMhBn6Q=
Subject key identifier: 30:D1:B5:FD:6B:2F:06:A6:03:D1:60:C6:C3:DE:6E:F2:44:14:7A:3A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112AAD54381D864E978700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2604:cb00:1200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2a:ad:54:38:1d:86:4e:97:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=edfce681-c472-40a2-b7a3-df16be3a1915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:2a:f4:73:b5:6d:46:ef:51:02:54:d3:e5:
62:c7:1c:89:96:94:04:f2:5c:34:bd:b4:bd:48:72:
d4:76:35:3c:2e:d9:3a:2e:3a:1e:91:ce:6c:1c:41:
65:a0:ee:89:a9:83:ee:db:d9:ce:5c:b7:4a:5c:e0:
8f:72:df:90:05:50:92:47:ac:4a:61:4b:a2:e9:25:
ae:d1:8e:6a:12:5a:c0:c9:5c:eb:2b:ca:09:e7:3c:
88:ba:e2:c0:67:e2:73:24:88:4b:1b:95:ec:cc:9c:
e3:0b:2f:9f:8f:ad:d5:75:06:63:28:28:ba:45:21:
db:59:a8:ea:83:2c:b7:85:23:04:05:85:f5:64:35:
22:4b:a7:7b:07:f6:54:2c:cd:5c:f9:e3:ad:9d:07:
38:72:2e:35:35:f6:04:e9:be:4f:1e:68:d5:94:38:
9b:db:bc:a2:b3:e9:f1:a0:3a:a2:95:01:0a:3c:e9:
c2:0d:7e:b4:83:1f:ec:e4:f1:5d:2b:94:74:1e:15:
27:3e:b9:6c:92:e2:3c:74:26:d1:c2:97:f9:5c:26:
97:e5:42:55:31:d9:a4:02:e9:c1:10:06:80:0d:80:
56:d8:52:82:51:a7:cc:f4:47:e9:bb:53:70:6e:a5:
ca:f4:57:28:f7:f3:03:94:30:b5:1a:ec:22:c1:71:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:B5:FD:6B:2F:06:A6:03:D1:60:C6:C3:DE:6E:F2:44:14:7A:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:1200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c1:c1:c1:c1:a7:ca:71:a7:e8:90:0a:ac:e8:a7:29:3a:07:
30:cd:e1:3a:63:69:02:42:8e:5b:d7:b7:82:93:3a:29:65:64:
b8:b1:50:aa:ac:a5:15:83:e6:d9:db:05:e5:3e:0d:04:dc:1a:
d2:68:62:cd:a2:a6:11:05:c9:54:93:c1:8b:b5:97:ca:5a:90:
e7:2e:bf:33:17:ed:1d:7a:e4:b0:96:c9:ad:81:48:6f:9d:0c:
5e:d6:4a:20:fc:30:a9:41:6b:5b:c1:bf:97:20:0e:0a:f3:5d:
07:a3:72:b3:94:bf:11:74:33:16:85:c0:9b:e0:39:a7:56:f8:
84:37:3d:56:5c:40:5c:a2:3d:c5:38:c5:2a:22:c3:d7:07:3f:
cd:f7:3a:f9:46:e3:9c:d2:bb:0e:c7:61:2a:33:15:eb:11:0b:
08:17:bd:78:a3:c7:5e:2e:eb:c4:39:c6:e6:eb:af:48:90:2f:
a2:88:24:fd:6c:a0:2a:d5:74:49:95:45:7b:22:5d:6f:23:ed:
83:3e:0a:c7:86:e7:fc:79:0f:73:8b:1f:07:ba:4a:ae:4d:31:
1f:c1:c1:52:ed:aa:95:98:af:5b:27:88:fd:2a:b7:c3:b8:6d:
3f:d1:f7:e3:fe:bc:c7:d9:5e:64:68:ba:dd:94:1a:da:92:23:
c6:39:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:17:10 2025 by rpki-client