Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3fe60b0-72fe-3682-9774-a5f1f7421406.roa
File: b3fe60b0-72fe-3682-9774-a5f1f7421406.roa (raw, json)
Hash identifier: hd8iK7CIroh/mV23mAl5ZOfSpGC7iW3oJ2OMRzOdFO0=
Subject key identifier: 79:2C:6C:43:15:21:BF:AF:F2:DE:7C:20:D8:90:43:30:8F:74:16:AE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E08395BDFE924642FDAF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3fe60b0-72fe-3682-9774-a5f1f7421406.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 208.78.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:83:95:bd:fe:92:46:42:fd:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=3353ce19-6aed-49d0-b3e5-c479952fec8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:47:df:54:40:24:5c:cb:77:f0:bf:b3:b9:
8c:91:7e:d0:65:81:11:31:d4:81:64:db:3f:2e:a9:
48:42:6f:ce:15:71:a2:d7:ab:50:01:1a:c1:f6:c6:
31:f7:fb:de:43:10:d6:a7:ab:15:ca:93:25:1a:52:
77:fd:3a:70:66:af:cc:71:ca:57:6e:c0:fa:af:29:
ff:6b:2f:98:0f:78:e8:81:4d:4c:d1:ed:73:2e:af:
f5:93:f9:da:58:16:de:4f:f2:95:a8:dc:79:ba:a8:
3e:1c:76:8a:0b:dc:98:7c:d6:c5:15:91:65:2c:b1:
30:97:4f:d1:9f:43:62:7b:63:65:01:ee:61:d3:81:
a1:55:75:a1:4e:a8:39:2f:85:92:85:d6:98:12:75:
b3:a3:d7:b9:70:bd:1a:8f:32:0f:00:ee:5d:31:0f:
34:6e:2b:21:29:ad:d0:6d:a5:1e:00:4f:f0:76:9b:
b1:40:f8:d9:53:01:1b:15:d8:9e:ff:81:b9:8a:4e:
7a:74:73:e0:b9:9b:e7:4f:d7:43:16:2c:fc:8e:d4:
28:39:94:00:a6:db:99:f7:e2:14:6d:8b:a9:74:52:
24:68:40:8b:77:98:ce:bf:bf:77:ac:d8:66:6b:53:
f0:29:1c:7b:00:51:65:92:df:80:33:7f:1d:48:90:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:6C:43:15:21:BF:AF:F2:DE:7C:20:D8:90:43:30:8F:74:16:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3fe60b0-72fe-3682-9774-a5f1f7421406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.78.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:78:33:19:ac:c6:d9:24:9d:4f:73:a5:ca:94:2f:b6:45:96:
79:ae:69:89:97:1b:67:b4:c6:d3:ff:73:6e:19:d7:cb:42:24:
70:68:5d:cf:01:a1:e7:1f:44:b5:5e:ec:38:56:c1:a1:9b:98:
91:12:16:c5:66:67:11:68:61:11:5e:52:da:2e:bf:1b:ab:4e:
95:b5:74:f6:9a:e1:c9:54:22:af:ab:93:1d:6a:1a:48:fc:11:
9d:02:cc:22:98:d0:e1:c3:a3:8c:ad:ec:f3:eb:d8:47:06:4a:
07:3b:2a:bb:81:d5:3d:8c:4a:d6:7d:fd:23:ba:af:6a:66:cf:
55:57:dd:7a:09:7c:71:a1:f0:2c:bf:23:2d:1a:71:d2:b6:63:
81:75:a7:33:d2:a9:0b:73:98:d8:7b:7e:8e:69:f0:22:85:64:
65:14:f2:ad:34:7a:b3:fb:10:90:ed:16:29:f6:cc:67:a5:d9:
7f:e9:8b:6a:ed:79:f1:06:fa:dd:76:a8:f0:72:81:36:6d:86:
56:70:a3:aa:68:0c:25:cf:2e:c8:bf:55:f1:8d:5b:3b:67:51:
22:0b:42:d9:74:f7:60:17:6f:da:2c:cf:59:6a:34:85:c6:e9:
a7:30:74:8e:22:72:7f:48:7c:e0:08:8f:8a:97:45:44:7d:05:
49:d6:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:51 2025 by rpki-client