Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa
File: cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa (raw, json)
Hash identifier: tUhAxt3EY5z/lvDZ0TBQAZU9js0jmlrJuAtLt+aloDU=
Subject key identifier: 53:25:72:92:0D:3C:F2:74:9C:33:39:4F:E5:88:F1:96:85:10:46:AF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0AC9168516198B4A52D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 71.28.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:ac:91:68:51:61:98:b4:a5:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=a9f76900-2ad9-418a-89e0-63eca7d31027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:8a:c5:ea:9b:71:da:09:3b:74:39:5a:46:
62:b8:05:e3:06:7b:6c:9a:13:5f:47:78:97:2f:42:
d3:2e:5a:d1:4b:45:15:60:7f:39:af:09:f4:2c:cd:
99:d0:11:91:c0:7a:4d:37:4a:e2:6e:c7:eb:13:41:
43:45:d1:fd:82:82:5e:a8:54:04:35:6b:7c:dd:35:
cc:56:22:3a:6b:6b:d5:33:17:c4:63:b3:94:bf:4b:
3c:a7:b1:cb:af:99:2b:7c:b2:d0:e9:05:6c:1b:3b:
e4:23:07:18:c6:df:e6:56:32:76:a6:31:f6:1c:cb:
aa:9d:4c:f6:e2:2b:af:53:3f:76:37:c2:a0:52:3e:
72:7c:f4:cd:f5:38:d1:a9:e7:5f:01:f2:5d:bf:cf:
1f:9d:e0:97:36:ba:a7:f0:89:25:d0:2f:d3:d8:9d:
e4:08:d2:78:29:94:ab:fd:6c:2e:fa:a5:0f:52:85:
02:e7:70:ef:1e:67:48:41:63:ea:f2:3c:ee:73:90:
66:5e:ce:b6:96:ef:22:83:d2:a0:80:05:85:99:45:
6b:56:85:3a:da:f7:45:2e:7d:d1:b1:34:3c:1c:a1:
6c:c6:f8:38:b8:da:52:c1:ee:c3:10:0b:50:42:95:
4d:87:cb:04:f2:14:59:37:48:08:ab:f0:6f:48:2c:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:72:92:0D:3C:F2:74:9C:33:39:4F:E5:88:F1:96:85:10:46:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e6:1a:ef:a6:72:30:53:1a:10:05:92:50:8d:15:89:b4:c8:
eb:59:c8:51:09:c8:4f:91:9b:94:a8:67:2f:6f:c4:86:7d:f9:
14:d1:f1:34:55:45:d1:71:da:b6:87:d9:8a:29:fd:bb:33:d6:
eb:bb:51:cc:93:60:77:ac:a8:71:e1:00:0d:56:b2:ef:90:df:
52:26:de:99:a6:2a:1c:2f:7d:f1:23:64:29:06:79:4b:f4:a1:
5c:b1:37:1a:f5:03:15:12:4b:06:83:d6:3d:59:79:ab:13:a8:
39:a9:e9:7c:04:08:86:a2:82:60:37:34:68:f4:f0:11:80:66:
19:ee:29:c5:bc:ce:23:60:36:1c:81:6c:4f:b5:d6:82:23:bd:
10:f9:22:70:1c:e7:d9:91:12:e7:a9:8c:ac:3e:80:24:fe:44:
3f:9a:8a:c8:53:5f:a0:af:be:1d:33:2b:1a:6f:a7:d7:c6:8d:
7b:e7:fd:f7:08:1f:a1:3e:ed:bc:14:75:f0:9d:81:3d:75:21:
5d:be:ce:2b:71:61:f1:93:4d:3b:25:ab:f8:98:80:38:19:5d:
31:0e:68:ea:e1:a0:74:37:3d:b7:ff:66:73:08:f9:b4:49:7b:
41:26:af:62:fa:3c:7a:19:36:cb:a2:83:47:97:ba:f1:24:05:
b0:73:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:33 2025 by rpki-client