Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa
File: afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa (raw, json)
Hash identifier: NC2hF8eWNeLaLSnHYOqJiOHvlw8sXv/xQgAZubYGKbA=
Subject key identifier: 9A:FD:FE:0F:73:77:34:D9:CB:69:10:46:CA:34:B7:10:11:BA:E3:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21104C6CCA4AC9D81D8B700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 32833
IP address blocks: 72.248.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:04:c6:cc:a4:ac:9d:81:d8:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=01589779-2059-463d-aaac-451a3858f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:3b:e3:d3:9b:72:3a:73:16:ec:e4:ab:82:
dd:98:62:cc:05:90:80:17:9d:f9:3f:eb:83:95:7f:
92:b3:e4:57:ec:af:dc:79:a3:11:88:9d:aa:27:95:
f9:4a:7b:e9:69:45:85:b6:a8:74:7c:15:65:7c:16:
b2:45:3b:f0:89:17:40:ec:c9:0b:50:dc:29:30:61:
ec:27:0c:31:1d:88:4c:2a:a4:95:dd:d1:78:8a:b1:
21:26:c2:a5:b0:3d:63:dc:57:15:1a:86:ac:e3:4e:
11:80:96:b6:c9:df:ab:23:98:cb:47:39:51:e6:10:
22:79:7b:d6:a1:4b:f1:12:12:00:6e:c7:41:33:67:
a9:0e:da:b6:6b:c7:a1:48:cc:17:81:28:b1:5e:eb:
93:22:de:e2:f5:90:9c:08:93:6f:ce:b3:b4:f9:ab:
47:90:6c:bc:93:38:01:47:ac:ab:f6:6e:60:52:46:
43:e4:8b:c7:6d:8e:ab:df:e0:6b:0b:0c:26:9f:c5:
da:b7:f3:39:96:85:b0:bc:7d:b7:ef:59:1a:1c:85:
d0:c0:5a:de:a3:6e:71:0d:a8:fc:b5:4c:0a:92:41:
e5:63:ef:af:93:bb:f1:05:bf:18:57:6a:6e:52:d8:
7d:9c:01:ab:a3:37:61:0b:4e:0b:7b:47:ec:f4:66:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:FE:0F:73:77:34:D9:CB:69:10:46:CA:34:B7:10:11:BA:E3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.248.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:fb:c4:68:8a:71:99:00:8a:ad:e0:64:fd:fd:fc:90:9d:df:
55:1f:97:a8:9e:b7:8d:b7:1c:c8:8d:db:9f:9a:60:17:f4:eb:
99:ef:bb:47:57:c0:24:99:28:4f:92:48:cc:74:7d:3f:2d:21:
c2:06:c7:f3:d4:6e:23:61:ff:3b:d7:72:ca:79:16:61:c1:7e:
71:3e:c6:19:8f:4c:74:d7:91:d3:54:c6:67:b9:27:ef:c8:db:
4a:b0:4e:24:fb:53:b3:52:aa:86:87:78:c8:f8:07:27:3b:83:
c6:0f:c9:eb:f7:74:a3:ef:9f:66:9c:62:9c:bf:3e:f7:92:2d:
33:ff:98:f2:81:12:6b:bf:b8:e7:74:3d:99:dd:1d:74:88:f7:
7c:a7:b9:43:10:17:25:d1:c5:0e:f3:c9:98:c9:c9:c8:63:0e:
c7:8a:34:a3:cc:46:ed:36:f6:84:b0:cc:5f:9f:b5:14:ac:82:
bd:a1:d0:04:ec:32:8c:4d:26:b2:2e:45:fe:0a:80:7c:68:99:
ca:c3:7b:06:76:ef:6e:a7:54:0f:c7:b1:96:00:38:59:d2:71:
fb:c1:00:c6:2f:d0:77:8c:23:09:19:2a:6d:a8:94:b3:39:d6:
cb:6d:56:57:5a:3c:88:a6:0d:18:f7:98:eb:40:04:83:d7:2c:
72:3d:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:24:20 2025 by rpki-client