Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa
File: ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa (raw, json)
Hash identifier: wtzXHUBPi1yzvZrK9sYi4Ra6QnlBCxvxWmNvF3lQUOQ=
Subject key identifier: 2C:18:5C:3E:42:0E:0C:D4:5B:D9:01:62:71:CE:CD:09:B7:D1:7D:C8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE11EF6550D49FA50E2FC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 173.190.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1e:f6:55:0d:49:fa:50:e2:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=0a3e5bc1-a42c-41f8-8f76-314229d57ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b2:f3:b7:e0:d0:74:5c:67:05:1e:ef:c6:9f:
cf:9d:83:d8:f6:a0:e6:fd:4b:ef:1a:6f:35:af:3d:
19:01:01:3b:48:a6:14:9d:48:d4:5c:8a:34:3f:8a:
27:6b:f2:67:44:f0:9b:40:6b:0a:c3:2e:3f:97:cc:
ce:63:37:f7:df:0b:fd:7c:fd:5e:0f:72:2d:ec:94:
39:8e:de:bf:74:df:a9:ba:41:d7:02:fd:df:b8:5c:
ee:41:1e:c9:78:ba:25:1b:53:64:7d:bb:5a:ce:61:
ca:4b:31:34:73:0b:7a:c9:88:54:2b:01:ae:2a:7c:
b7:0c:9f:3a:f9:99:40:95:f8:be:ae:5e:8c:27:63:
81:1a:1c:4a:bf:1e:e6:9e:f3:8d:4b:49:ed:fc:b5:
af:43:13:76:e0:ca:0f:45:66:2e:95:f7:07:60:25:
86:cd:7d:4b:e5:4a:be:18:39:64:1d:1e:1c:66:61:
24:ed:d0:03:26:18:fd:40:77:19:d0:f5:ed:47:49:
8c:25:65:62:9f:53:ad:fc:2f:d3:ff:c9:c4:43:73:
8a:29:75:6c:b3:6a:58:15:5b:63:e0:35:85:eb:e5:
7c:31:3e:e3:fb:d3:9e:3e:5c:26:fc:ac:81:1c:a4:
6b:cc:c1:fa:6e:aa:e1:08:72:de:3d:54:84:3c:c9:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:18:5C:3E:42:0E:0C:D4:5B:D9:01:62:71:CE:CD:09:B7:D1:7D:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.190.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:72:47:d2:44:b9:23:37:b5:ac:a2:6a:bc:6d:29:d7:30:54:
ab:e8:68:d9:e8:e9:58:32:9c:53:61:46:e0:6a:1d:90:07:d4:
d0:43:46:d9:7b:44:2e:00:b6:6b:a4:ca:ec:2a:a8:5f:6b:bb:
50:a6:1c:7e:ba:3c:a4:ae:60:e0:f4:72:06:5f:de:d4:2a:93:
ea:3a:4f:47:bb:db:ab:18:4e:43:72:87:c7:d2:27:7a:0b:ef:
df:56:b6:f0:95:3a:b6:4b:4d:cc:b6:9e:38:f1:98:db:f7:5c:
8e:51:bb:09:7f:ed:41:19:f3:e9:45:c2:35:5f:e2:7e:1e:2a:
ad:3e:b8:b0:2e:15:cf:51:a0:69:0e:cd:b5:2a:28:12:87:16:
e5:3f:11:4a:31:9b:2b:1a:f2:b8:85:c7:39:4f:d2:28:ae:de:
20:40:98:cd:35:3e:94:d9:45:e6:d1:33:59:bb:9f:52:74:87:
a1:d2:49:30:88:fb:40:a7:4b:98:39:e4:62:bf:93:ff:ea:1f:
78:3d:ce:b6:d9:d8:78:07:01:b2:35:72:6b:2c:32:4d:4e:cf:
32:cc:c3:b0:07:59:25:aa:ac:f7:79:71:4f:17:cd:9d:29:46:
d6:44:b8:5a:5d:33:0c:df:3a:f9:80:53:30:a7:d1:b6:01:38:
55:55:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:30 2025 by rpki-client