Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa
File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json)
Hash identifier: mdu3aLDGsTTdiPixOfgmoGof5IstbePjtXWUjkKeRws=
Subject key identifier: B3:96:C6:EB:A3:9A:39:DB:8D:55:9F:8F:C2:9C:07:6F:EB:20:C3:F3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F65BF4C47DEEF65166E50490
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 7029
IP address blocks: 40.142.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:f4:c4:7d:ee:f6:51:66:e5:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=44e97dc6-beba-43c4-9bc2-17bad54ee2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:57:94:45:ef:a2:d3:6a:3f:8d:cb:23:51:
8f:19:7e:59:32:2a:d4:b0:8c:31:4c:0f:0b:f0:9e:
65:cc:9e:3b:a6:81:74:e3:7f:20:17:59:c8:35:43:
6c:85:60:36:f9:a7:f8:53:0c:7f:68:5b:d8:8f:20:
ba:b9:5e:ac:fe:96:aa:a6:25:0b:8a:2a:df:93:b8:
d3:14:d8:b3:c5:cf:6c:ca:0b:5c:1b:26:31:23:e4:
1c:46:18:4f:bc:43:bb:1d:2d:f2:55:88:7c:8f:e1:
a4:06:87:1b:8f:cf:97:d0:80:7a:b4:a7:99:47:60:
ac:3e:3e:b0:b2:39:44:67:1f:0b:41:02:9c:c5:53:
0e:b6:59:6b:66:f5:88:61:66:ea:0d:db:40:c7:78:
8b:27:29:1f:83:8c:03:56:8b:04:2a:cb:3c:bf:90:
6b:54:01:1b:fd:b9:bb:7b:1c:6d:60:11:95:b4:9b:
b9:95:46:73:8f:a5:44:91:fa:c8:f3:fe:7c:ab:76:
a0:21:3d:d5:81:de:70:dd:4b:09:95:06:26:92:cf:
b6:2c:51:de:d1:d2:62:35:31:75:6d:9a:d4:7f:03:
5b:f5:72:c1:52:d3:b3:b2:d0:ec:dd:57:32:07:33:
ac:6a:f8:5f:8c:7e:15:4b:9a:1d:49:6d:70:d3:eb:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:C6:EB:A3:9A:39:DB:8D:55:9F:8F:C2:9C:07:6F:EB:20:C3:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:a5:ed:07:28:ed:9f:41:6a:00:5e:2c:21:b5:78:10:59:e0:
7f:f5:ef:1c:3c:1f:fe:3a:e0:bd:07:20:07:a3:0a:4b:a6:36:
6b:68:22:ad:97:88:72:e5:ff:c5:2b:f2:ff:79:a8:25:60:f7:
f8:a1:56:c0:df:2c:4b:39:29:4a:db:0b:55:3d:70:d6:82:ca:
f8:ef:c9:cf:ab:11:6f:e7:a2:3a:d3:03:24:95:60:4d:48:f0:
6e:58:f4:ba:fe:7a:ea:d9:03:16:6f:a9:80:87:60:5a:21:58:
62:f1:12:8d:e4:16:21:99:c0:87:a1:b6:85:27:27:b8:d5:6d:
78:6f:37:36:e5:82:95:ad:f7:73:50:7a:2b:0c:58:40:d9:88:
b4:de:15:3b:f3:20:af:d5:67:a8:54:01:3b:97:ab:d2:94:bc:
e7:43:03:d1:ab:a1:2e:a4:1d:ae:fa:41:97:eb:21:49:3a:83:
c0:17:93:84:3e:11:df:a4:99:f8:ae:66:6a:b0:70:e5:f4:ac:
b0:c8:66:12:fc:53:87:ab:48:13:55:a1:d0:da:ff:fe:92:28:
e6:4f:ff:31:1c:b7:50:e4:ad:21:6d:ae:70:98:ec:0e:73:f1:
76:93:47:23:1c:ad:92:0b:76:df:4a:9e:39:c4:c3:ad:02:e9:
bd:c1:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:05 2025 by rpki-client