Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa
File: b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa (raw, json)
Hash identifier: FPyW2ZjP5m+6u/JlHQ+NxzBBmYnEE3dGLmrZ5Z8TI9c=
Subject key identifier: A6:BA:E8:D2:39:3C:8F:A4:46:5F:B4:BB:36:A2:DB:2F:7B:DB:BB:5E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B60F1DE7405B65923100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 162.40.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b6:0f:1d:e7:40:5b:65:92:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=32db2684-0970-42d7-accf-09209f1a3c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:67:92:1d:dc:89:cb:4f:ea:a1:93:9e:61:
4c:7b:ad:f3:de:4e:f4:63:25:73:e7:bc:75:64:dd:
98:bb:c7:a7:52:90:5d:40:bc:ef:34:bf:d8:3d:d3:
05:86:c5:ff:7e:ee:1a:75:04:7d:e5:4b:49:20:1b:
98:1d:cb:2e:95:8a:8b:3c:c8:e0:4e:09:32:dd:25:
4f:f5:53:5e:76:ed:f8:73:f1:fe:6e:1f:b0:06:9b:
d1:3b:d2:3e:55:71:07:f6:9b:95:7d:61:22:1a:c3:
90:de:b1:24:92:cc:9d:11:e7:10:a2:97:4a:f8:e7:
2f:e3:db:f5:12:56:21:a9:3e:77:4e:49:d4:83:69:
98:e2:64:18:ad:6a:d5:e8:93:35:e7:df:dc:22:58:
db:ab:2a:4f:5e:82:ba:d3:2e:a0:1f:72:0f:68:3b:
43:2f:5c:4b:46:53:c5:44:54:28:07:63:3f:b9:a3:
6d:e6:f1:69:4d:9f:6c:e8:93:ff:85:6b:88:14:9c:
fc:f4:7a:dd:6b:6e:d2:a6:9f:dc:0d:38:68:a0:87:
ea:13:1e:a2:5c:9c:c7:00:9a:73:87:f0:53:6e:40:
a7:d3:ae:51:74:41:aa:f2:06:84:e9:35:45:6e:3f:
bc:df:41:98:cc:99:4c:90:fe:52:b3:95:1b:c3:44:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BA:E8:D2:39:3C:8F:A4:46:5F:B4:BB:36:A2:DB:2F:7B:DB:BB:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:90:a5:be:98:9b:51:2c:ea:7f:33:7e:ec:6e:97:f9:c3:6b:
db:28:c0:1d:37:2c:a8:35:28:2b:df:0b:3e:c3:02:f9:9b:4e:
3d:13:3a:c3:7b:61:f0:dd:4f:df:1d:03:19:cd:3b:20:28:b0:
50:5b:8a:7b:b2:d9:52:b2:3c:90:1b:f5:79:b9:20:85:69:49:
ac:50:35:83:0e:ff:c9:5b:c5:64:b2:3e:30:c1:df:23:39:8c:
c0:23:92:fe:22:6b:73:f1:72:6b:84:7a:1c:82:13:d4:a5:ed:
e4:26:9b:12:ec:3b:f5:1c:d2:b7:d7:95:de:96:9c:29:ad:b0:
17:a6:07:88:c8:7a:13:46:d6:7b:15:b3:24:aa:4b:9c:f0:6b:
7e:0c:81:c6:ba:5b:a0:72:aa:5b:89:0e:7b:1d:f5:f5:b8:6a:
78:0b:20:40:38:ff:55:f7:bb:21:c5:0f:75:8e:3e:96:0c:48:
c3:ac:40:ce:2e:2e:20:b8:53:d2:a9:d4:00:7a:ff:95:b8:46:
7b:9e:19:2f:cf:9b:8d:6b:f3:d6:72:b6:db:49:56:bc:d3:36:
17:c0:0a:f8:13:87:c0:36:3e:a7:77:ce:77:f8:02:80:d8:d3:
58:26:15:5e:9b:9c:71:12:93:ba:35:5d:a7:69:7e:a1:05:c6:
c2:fd:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:56 2025 by rpki-client