Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa
File: b9f849f9-e596-3f52-93a2-e526e4138027.roa (raw, json)
Hash identifier: QFHrbCXWxE2/IAtndNeAf+a3pHDP/dq5YTIsO5542iI=
Subject key identifier: F6:19:EC:95:9E:F8:5A:6D:81:EA:B0:44:C8:00:22:30:32:C5:35:C1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB9420C303F12B0014DAD700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa
Signing time: Thu 06 Feb 2025 18:14:26 +0000
ROA not before: Thu 06 Feb 2025 18:14:26 +0000
ROA not after: Wed 07 May 2025 17:14:26 +0000
asID: 7029
IP address blocks: 71.31.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:94:20:c3:03:f1:2b:00:14:da:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:14:26 2025 GMT
Not After : May 7 17:14:26 2025 GMT
Subject: CN=2b0fc116-8188-4328-a640-7ef8056d8427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:a6:47:d0:d5:fd:67:a5:d8:0c:2a:a7:49:
d9:c9:3b:0e:d2:54:10:16:b0:d8:f0:1c:d1:c3:0e:
9e:bc:d6:43:53:bd:b3:d0:7d:6b:af:a9:d1:2d:34:
07:94:08:33:da:c0:95:9e:bf:83:df:21:14:3f:08:
0f:3b:a6:5b:c2:e7:0f:65:c3:fb:b1:1c:a0:0c:c8:
9a:b0:86:2b:f3:5b:58:b8:0c:34:f5:70:ab:42:1d:
1c:50:d6:af:7b:dc:6d:1f:e3:9c:c8:a6:09:62:3c:
c4:fd:8c:ba:37:7f:e5:2c:44:e4:e8:01:d8:33:5b:
90:e1:cf:da:00:34:e6:43:1f:4d:3e:ca:96:78:50:
48:13:d2:85:04:4f:32:eb:73:08:6b:ba:db:69:6a:
4f:7c:17:f2:1f:57:bf:50:c6:40:8b:18:95:f9:f9:
7e:c4:4e:2c:f1:2c:aa:0d:a2:f8:a2:67:ab:42:70:
f0:94:a3:af:ad:de:22:3f:07:4b:d5:5c:ba:f1:6e:
13:e0:dd:7d:67:60:e6:cf:be:73:53:08:03:e3:12:
3e:a1:27:eb:1f:fa:4a:41:6f:a6:72:f4:2e:1b:c9:
ff:23:02:61:cd:13:98:ea:af:5a:95:ee:c3:22:b8:
9e:58:10:0b:46:9c:f2:a7:d4:e3:7a:ad:80:f5:d2:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:19:EC:95:9E:F8:5A:6D:81:EA:B0:44:C8:00:22:30:32:C5:35:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:5a:2f:77:93:2a:fe:3a:b6:d6:f2:ef:51:e0:1d:ba:d1:89:
72:c0:89:d2:69:ff:a7:dd:06:eb:60:a5:a2:a8:d6:35:7a:5f:
94:f8:ac:e9:85:56:27:89:af:56:bb:87:9f:65:3d:b9:49:f2:
95:52:be:2f:a9:69:94:73:33:b0:18:da:02:ff:74:50:54:5f:
34:35:5c:de:ef:8b:06:64:58:68:8b:20:fd:bc:99:db:4b:2c:
e7:4f:48:01:02:f1:a7:84:08:3d:6b:89:cc:5f:b5:23:47:25:
0a:8f:f3:cd:56:4f:22:9c:65:21:10:bf:96:a1:6b:c3:69:e8:
b4:e6:28:60:fd:d0:9d:6f:cc:24:49:ce:c1:66:d3:5f:95:e4:
4a:1b:4e:2b:60:6d:a4:79:59:da:e9:fc:11:be:f0:7f:cf:ce:
f1:08:78:f2:c9:9e:0b:00:95:97:42:b6:e2:f5:1f:e0:a5:ed:
f0:2b:1c:78:12:a3:9c:f5:19:b6:ff:24:d7:9c:f3:0c:ae:3e:
a5:68:0b:b0:53:ed:a7:bb:03:ed:9d:cd:26:8c:7d:1a:93:bb:
13:aa:67:ff:09:48:10:ec:ce:7c:28:e1:77:e3:74:ae:99:44:
8b:94:ca:15:5c:97:a6:23:1a:02:69:81:77:a1:35:c4:59:b8:
a3:4e:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:54 2025 by rpki-client