Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2ffd90f-ebf8-3f65-87f1-bc5d1a839148.roa
File: b2ffd90f-ebf8-3f65-87f1-bc5d1a839148.roa (raw, json)
Hash identifier: yysCgynLY7lvzNpDif78rh/4NpkLCSIgvguHlnkd9f8=
Subject key identifier: 03:A2:CD:70:0A:EF:42:2E:8A:B1:FF:AF:64:B2:44:5E:68:D5:75:33
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EDDA019072FF523C5D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2ffd90f-ebf8-3f65-87f1-bc5d1a839148.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 69.40.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ed:da:01:90:72:ff:52:3c:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=f642909b-cb6d-4f05-8ba4-917214bccbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:bf:00:d0:be:d2:b1:ca:e9:d9:1b:00:8b:
c4:7f:4f:ce:e8:f3:28:ba:40:5a:99:8e:a5:fc:ca:
f9:d1:7a:d6:61:3a:98:06:25:48:3e:40:89:49:98:
5f:48:40:d1:c5:2b:7d:b0:b4:52:7a:98:98:29:48:
c9:0b:52:d0:20:48:ce:4f:9f:13:f6:cc:55:4d:5f:
f3:7a:46:b7:f3:26:b0:f7:49:b6:0e:bc:8b:4f:94:
31:fa:6d:df:c9:f5:dc:8a:92:18:e6:4c:7d:14:ba:
9e:18:2e:81:d0:67:c3:4c:42:de:d4:c6:cd:77:35:
bb:35:70:3e:46:43:41:53:8a:d5:e0:25:95:21:b6:
16:de:36:56:8d:45:55:d3:5a:b5:86:d1:7e:f3:0e:
35:08:82:0a:ac:38:5d:4c:90:41:a0:a5:c9:49:15:
6b:cf:b8:c9:2a:e9:24:bc:25:87:5a:b0:d3:f6:4b:
18:32:fa:a5:7a:dd:31:aa:e2:8a:a2:2a:33:23:a2:
a6:ae:e1:c5:5d:a9:6e:55:b8:cb:55:d0:04:0d:81:
ce:45:a0:d6:36:09:f8:7b:32:c6:a2:c7:ba:82:6c:
ea:b3:95:ad:ef:8f:71:7a:f4:6d:6c:d1:11:9c:ac:
c9:ce:80:55:91:33:a5:35:6c:6a:f4:40:39:db:94:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:CD:70:0A:EF:42:2E:8A:B1:FF:AF:64:B2:44:5E:68:D5:75:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2ffd90f-ebf8-3f65-87f1-bc5d1a839148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:59:51:b5:85:4c:e5:7a:9a:79:66:27:90:d1:e8:ef:8a:3b:
db:80:a5:97:30:02:c0:d8:d6:45:a8:5e:8c:52:25:a7:f0:db:
2c:f8:42:a2:30:0a:9f:d6:fa:4e:db:86:29:a5:76:09:44:f3:
a7:db:56:e6:b4:42:2a:3f:08:5f:83:e8:75:9b:cc:2a:78:4a:
ba:0c:b9:cb:17:f1:90:1a:99:8f:f7:2f:d6:9c:6c:25:55:85:
1c:a1:09:01:95:08:e0:a7:ee:cb:1d:45:ad:bf:3c:66:7f:65:
23:14:e2:68:f2:d6:c3:03:94:4f:4d:34:c5:6b:59:97:6d:02:
36:63:34:5c:3e:06:4a:2d:72:d1:f5:5a:fc:69:5d:2c:3d:b9:
39:1c:37:ff:57:78:4f:83:a3:d8:28:49:27:a9:8a:d6:99:39:
0e:7b:f6:41:3a:4a:1f:a1:f1:f1:62:63:20:1d:64:81:a9:77:
4e:e6:68:ad:31:3c:c0:0f:25:0e:64:93:54:c0:ba:86:2f:f1:
0b:60:d4:51:98:ba:47:83:98:73:dd:50:7c:f1:85:91:3a:d0:
ea:54:15:05:6b:d4:d4:fd:4d:db:24:bb:5b:0b:59:64:a0:e3:
4c:aa:d5:8e:aa:d3:97:d2:0b:b6:3c:10:a3:d7:98:34:c9:8b:
2d:7d:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:38 2025 by rpki-client