Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc46f26f-c1f0-3a70-a4f1-c07ac0c5ae5e.roa
File: bc46f26f-c1f0-3a70-a4f1-c07ac0c5ae5e.roa (raw, json)
Hash identifier: /Uz6R6pRCxEd1AezHEFO7vgKjj3AAIUoaX8omwYE5D0=
Subject key identifier: 12:12:A2:29:B4:D6:69:17:37:17:9D:07:A3:C1:F1:88:CF:B9:D4:FD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0AE1C06C01DA67D89E5D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc46f26f-c1f0-3a70-a4f1-c07ac0c5ae5e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 173.186.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:ae:1c:06:c0:1d:a6:7d:89:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=068d2eab-6984-4df2-b3d2-d843d5c299c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:57:d9:a7:2e:02:3f:eb:e7:1c:4e:ed:00:
30:4f:89:d4:71:34:7f:dd:6e:ad:16:6f:fd:be:01:
7b:dc:da:69:77:b6:9c:3a:07:1d:4b:c0:0c:94:78:
33:54:d1:79:11:8c:56:ac:fe:5e:7b:00:76:70:d6:
3e:30:74:9d:ae:33:36:05:af:35:8f:83:7b:16:e3:
65:dd:ea:90:41:96:20:a9:75:20:25:95:c8:fa:3b:
7d:38:09:8d:0a:97:47:f1:da:ac:41:9c:ac:9c:e8:
e7:e8:24:35:76:77:98:3a:08:46:60:d0:6c:e0:7d:
b9:eb:72:86:19:63:c6:41:93:bc:25:20:e6:04:be:
ed:5a:a2:f5:a8:74:f4:4f:f2:e8:ab:d7:d6:54:fc:
0d:f1:71:af:b8:eb:af:9b:da:46:e1:58:da:9b:ab:
ab:a5:0c:be:79:2b:2c:07:af:eb:2f:9c:a9:f1:8e:
81:ec:6d:89:ad:7f:eb:9e:82:1e:4a:e3:ca:49:a3:
02:84:17:0d:11:3e:fe:a5:63:b2:f7:08:54:41:b9:
2c:c2:06:7a:48:25:ed:22:ce:fc:96:4b:05:6a:2a:
99:5e:f2:f4:f7:f0:db:a1:71:ea:a8:a4:db:dc:38:
34:36:03:63:3c:76:38:1f:c6:b9:61:39:68:ab:e9:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:A2:29:B4:D6:69:17:37:17:9D:07:A3:C1:F1:88:CF:B9:D4:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc46f26f-c1f0-3a70-a4f1-c07ac0c5ae5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:bb:f2:2e:f3:dd:a8:3b:d5:ee:9f:ec:99:0e:b6:a8:1f:62:
ec:f0:9a:c5:df:78:dd:47:08:50:96:ca:07:32:84:a9:2a:e6:
37:91:64:42:d8:9e:fb:f5:e3:4a:34:43:1c:5f:33:1c:a9:49:
37:d5:4e:15:d2:2e:49:f3:ea:b1:c5:18:4d:48:d1:cd:8c:f5:
05:08:fa:1f:eb:02:50:35:a2:c6:17:c7:98:ff:65:89:3f:ad:
15:8d:f6:08:92:56:7e:66:42:32:7f:7e:c2:f4:2a:c5:18:44:
7d:3c:00:30:26:36:aa:d1:05:6f:e7:93:cc:3e:bf:91:f2:73:
bc:8b:8d:b5:fa:db:0f:2a:7a:d9:0e:87:ef:72:cd:e4:48:8d:
c5:47:15:bd:ee:fb:f6:5e:7a:0d:40:57:18:46:63:ab:dc:99:
20:55:35:61:b4:ce:9f:93:3f:3e:e6:1c:99:52:72:79:96:e0:
2d:b5:d8:e5:84:38:ba:da:05:2e:4e:bf:fe:97:64:7e:81:6d:
95:de:a6:fe:45:f3:0a:d4:af:33:57:24:0a:fe:fe:9d:b8:f8:
1f:a8:a0:97:60:f9:8d:f6:c0:dc:b1:f5:ca:b5:44:f1:a9:ca:
6d:d4:b9:a9:11:5f:4c:2f:05:c4:3c:06:cb:14:88:bf:a5:f0:
ec:a6:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:27 2025 by rpki-client