Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b296e23-d024-39e9-941d-95485585e77d.roa
File: 9b296e23-d024-39e9-941d-95485585e77d.roa (raw, json)
Hash identifier: 1wDYv4wYIC/GTAEFKpalhJoow4TaDYiyHAotfNDRIj4=
Subject key identifier: B9:B3:E8:4D:36:FB:A2:05:7D:CA:C8:C2:F3:A6:80:43:09:F1:66:AC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EE773811B46A45F91C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b296e23-d024-39e9-941d-95485585e77d.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.28.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ee:77:38:11:b4:6a:45:f9:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=1a7c215a-c35d-44f2-9af7-2f5ddaa99152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:7e:fc:1e:e4:a7:8a:1d:f0:d6:a7:aa:5e:
fd:70:62:fd:fd:2e:60:cd:66:79:a6:8b:0c:fa:ca:
fa:0d:86:f7:ae:fa:dc:f5:d9:0b:c0:71:de:6f:b1:
52:5e:07:3f:a0:b1:38:50:95:c0:8f:30:a3:fe:78:
30:8a:f8:66:b2:c2:56:74:b0:6c:f2:6d:42:4e:49:
aa:f9:a1:26:ae:e8:81:04:f5:ae:87:8a:d9:37:5a:
c4:05:3a:5b:76:e6:f2:c7:a2:79:3e:10:f6:03:f9:
f6:ee:65:aa:5b:5c:13:da:44:0e:c5:4e:0c:55:17:
f6:14:94:78:ad:a6:a8:58:6a:9e:59:be:e8:c2:de:
34:80:ec:d6:bf:c8:30:56:6f:1a:f7:78:00:0b:d6:
3d:47:de:ed:8f:f6:7d:f6:34:97:0d:e2:b1:c3:41:
45:a7:f4:fe:e8:5c:33:9a:29:e2:d8:e8:e3:79:59:
cc:29:e6:14:e4:5c:49:81:0f:6e:ff:f9:cc:c8:ef:
6a:aa:6a:c2:52:61:27:39:a7:b7:44:60:3f:2b:7d:
eb:85:59:70:96:a9:4f:22:d3:3a:44:1e:dd:b3:f7:
3e:a2:ab:88:f3:84:ef:ad:78:cf:6a:18:5c:eb:df:
d3:51:ab:c3:d6:57:61:f4:e1:36:b4:98:6c:09:73:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:E8:4D:36:FB:A2:05:7D:CA:C8:C2:F3:A6:80:43:09:F1:66:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b296e23-d024-39e9-941d-95485585e77d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:43:49:28:9c:18:87:de:44:5e:4b:d8:b7:8f:bc:81:a4:6f:
04:88:12:32:5d:86:04:18:d5:4f:96:96:35:af:a4:c2:14:2c:
e9:ec:aa:d0:44:e5:c9:42:17:e2:bd:09:ca:98:d1:20:42:bc:
77:ff:2b:34:4f:68:54:3f:61:48:37:a3:a8:d8:18:44:a5:5c:
36:53:88:ed:ad:61:85:3f:1c:d8:f8:0f:68:99:2b:38:80:d7:
ef:66:4f:d2:45:17:ad:23:68:2a:df:cb:db:cd:b7:b4:e8:35:
99:52:56:12:db:37:27:91:ac:86:6a:13:04:63:ea:d8:28:fe:
d9:f8:dc:6d:8c:cb:c5:2f:b3:c9:e2:65:77:52:34:20:65:68:
96:84:05:41:e4:0f:a8:fc:80:6c:be:b2:7f:fd:73:a9:ac:84:
25:4d:52:fe:8c:e2:bb:06:54:aa:61:cf:e5:e0:69:0c:c9:80:
32:6b:41:85:6b:02:09:fb:d8:bf:88:9b:9e:2e:d7:37:67:db:
0d:bb:d3:59:f8:e4:03:b3:a3:fc:31:1e:09:97:9c:e6:ea:39:
ed:e5:88:46:b4:7d:56:8d:bc:a9:46:c7:77:c1:cb:0f:9f:49:
f4:52:2e:de:d7:4c:28:a3:4f:0f:dc:a8:99:a8:a8:79:43:06:
89:d8:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:11 2025 by rpki-client