Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae3b743-00ca-315c-ab21-146626273bed.roa
File: aae3b743-00ca-315c-ab21-146626273bed.roa (raw, json)
Hash identifier: iBMg8GTVzyqJ3Ho2c4dPhhzyGZMN8F669JDHbqE5gTw=
Subject key identifier: 52:66:DC:14:AE:C9:44:32:EE:54:77:C5:B2:64:CF:10:1A:2C:CD:F0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211230516DC95703D0EFFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae3b743-00ca-315c-ab21-146626273bed.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.189.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:23:05:16:dc:95:70:3d:0e:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=2646e4ea-b6d9-4a93-934b-57685d4f5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:da:15:71:e5:8b:5c:b3:78:cc:9a:31:8c:
5b:8e:a7:13:58:64:66:80:c8:a7:25:ba:e9:27:b4:
e9:c6:aa:af:a1:04:f5:f7:9f:6e:5e:bc:62:43:9f:
49:e2:bc:17:cd:6c:8c:72:b6:e0:24:e6:46:e3:7c:
04:ed:1f:33:ca:ef:1f:53:c5:8c:38:4c:75:66:a1:
3e:f5:cf:51:9f:6e:3b:ba:b0:39:38:86:22:ca:99:
d3:31:94:53:58:0d:fb:89:2e:f4:6b:df:60:d9:f8:
07:08:19:f6:92:35:e0:5d:0a:89:4b:97:cb:58:3b:
88:b2:82:5a:f9:a9:e7:fb:db:ef:b9:22:ad:53:a7:
4d:8d:ec:84:44:89:20:27:34:db:5c:c9:48:47:8a:
07:c7:cd:04:c2:55:a9:58:69:b0:3d:be:f9:af:71:
d6:01:a4:52:44:73:87:3e:18:5f:c3:e5:48:b6:c8:
6f:79:61:84:ef:b1:d7:05:7c:70:fb:d0:e0:43:20:
9b:e0:62:a0:e3:28:26:9d:72:97:4a:3e:cc:4a:b9:
41:a3:6d:7e:7e:5c:e6:1b:1f:7c:0b:78:93:34:02:
92:49:6e:36:a5:3b:4e:83:c7:10:ec:99:c3:d2:a2:
f7:8b:8c:4c:31:4b:54:28:24:76:34:e7:40:a3:42:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:DC:14:AE:C9:44:32:EE:54:77:C5:B2:64:CF:10:1A:2C:CD:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae3b743-00ca-315c-ab21-146626273bed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:68:dc:10:ac:8e:3f:f6:18:4e:cc:29:c4:92:ce:ff:7a:5d:
81:02:f0:3f:e7:b2:00:5e:73:1c:f1:c3:b2:42:a9:1f:6d:f2:
b3:16:a3:a9:4f:7a:55:8c:86:3c:61:10:60:a0:20:e3:d7:4f:
36:5f:2c:ea:22:a0:0a:cf:c6:23:11:1e:36:4d:64:27:df:fe:
b1:34:91:02:d1:a8:50:1c:bb:00:ed:97:37:ee:01:38:b3:51:
bb:12:12:fa:8a:11:bb:37:c9:e6:17:0a:f0:a0:aa:05:55:58:
56:6c:ef:58:2c:74:2a:e1:62:63:f3:89:e1:7c:22:22:7b:20:
77:fd:3f:bc:eb:62:7e:f3:52:2b:3e:a3:e3:60:e4:d9:4a:4c:
b3:25:0c:1f:d5:30:f8:06:3e:ca:4d:18:2f:d0:78:0e:3d:10:
07:98:6d:01:b3:25:0c:86:57:1a:a3:48:d0:09:6c:ca:b9:46:
dc:4e:7b:0c:e9:68:f5:68:19:e6:21:c1:a3:48:e2:d0:88:95:
d5:b7:af:c2:ed:03:e6:9e:60:dc:92:d0:13:79:19:2b:61:42:
cf:5b:2d:ed:b4:dc:63:2b:bc:94:c1:84:5f:bb:0c:97:c9:aa:
64:82:0f:56:00:ee:7f:18:2a:a6:54:02:5f:70:70:2b:d5:84:
bd:d0:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:13 2025 by rpki-client