Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b43e0704-5fd9-36d6-bb1d-c29135157f29.roa
File: b43e0704-5fd9-36d6-bb1d-c29135157f29.roa (raw, json)
Hash identifier: 3fD41QaaoWW+uCx7FhK+lacpvXMDq7G8TQ+18NZ5tzs=
Subject key identifier: 86:87:E0:E6:75:E7:87:62:5B:7D:B2:58:47:DE:0D:0F:65:13:3D:B0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F92B0723779D61257300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b43e0704-5fd9-36d6-bb1d-c29135157f29.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 209.162.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f9:2b:07:23:77:9d:61:25:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=3b63be94-fc49-499b-b0bc-fc46d10285c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:18:87:1b:57:38:46:9a:c2:05:65:28:70:
00:e7:5f:90:34:78:cd:e4:89:e9:58:73:e7:92:03:
a9:c1:d6:4b:7d:69:9c:f7:16:3f:ba:bf:d0:f6:33:
b5:d2:37:48:4b:17:10:30:45:12:0e:0f:35:55:53:
8a:a3:d2:cf:77:73:4a:83:35:e4:72:0f:e1:5d:ae:
e1:03:d6:02:6d:dd:1a:81:3e:30:f8:27:b6:ea:56:
c8:b7:15:d5:e7:4d:90:c5:c1:3e:02:1c:c0:11:a5:
d1:5f:bb:c0:26:87:4d:d9:ac:c5:24:06:5e:64:fb:
5a:73:31:56:e0:d8:81:50:7b:df:65:65:a4:d0:49:
48:0b:13:fe:99:55:df:45:ad:06:5b:c0:71:cf:cc:
fa:d1:66:2c:8e:cd:fd:3f:ce:9c:43:b5:e5:e5:5f:
d6:56:da:99:f3:ff:a4:99:63:41:ba:83:fd:54:cf:
ec:ed:a0:36:f7:a2:67:cd:9b:21:c2:bd:6a:20:66:
76:3c:8a:9f:c0:8f:e7:9f:1d:1e:68:42:62:04:05:
f2:82:aa:97:f8:d8:64:d3:dc:4b:e2:bf:94:f1:c2:
67:f3:4a:7a:16:2d:f2:1e:03:0a:0e:a3:1a:9e:e0:
c5:79:95:8f:69:11:b0:af:02:38:bb:6b:fc:c5:da:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:E0:E6:75:E7:87:62:5B:7D:B2:58:47:DE:0D:0F:65:13:3D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b43e0704-5fd9-36d6-bb1d-c29135157f29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.162.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:2b:e4:a6:06:d5:6a:c2:4e:88:5a:f4:2c:e8:dd:78:0b:c1:
65:65:74:54:b8:bd:6c:99:12:71:e5:be:4e:6d:b9:36:48:46:
7c:fc:df:0b:7b:fb:9c:74:18:92:d8:21:6a:db:5c:3d:23:2a:
4a:1e:4e:61:e4:26:ab:ab:bb:e7:f8:8e:d5:03:b9:5e:54:90:
e4:68:61:18:33:9a:d9:70:02:7d:0f:d5:ba:8e:4f:47:c6:b3:
23:a6:67:6c:a1:fb:1a:77:e8:1b:74:05:ce:28:ae:d4:8d:71:
4e:33:2a:41:2c:b2:3e:ba:a2:74:fb:51:e6:0a:a8:66:9b:22:
47:fc:dd:8a:b1:95:11:da:a4:65:5f:18:83:fc:0a:3b:5a:f9:
74:a8:59:14:10:26:ef:d2:36:23:1c:f9:27:19:d1:72:54:03:
9c:c2:c7:ff:37:92:de:bb:08:e7:44:b1:9e:fc:b3:44:d2:8b:
49:3e:7d:47:69:41:d5:63:a6:3b:df:0c:ce:92:4e:40:66:58:
38:a3:45:78:c6:af:11:fa:1c:e4:bc:4b:20:e5:c2:58:86:61:
d0:45:2d:04:65:d4:76:20:f7:80:56:5c:38:db:4b:8d:5a:9b:
ef:b4:4d:e4:2c:8d:49:68:c5:8c:21:3f:eb:7b:60:3e:7e:4b:
3a:d4:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:34 2025 by rpki-client