Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa
File: d75928b4-5f67-3862-b915-b7ac40de473d.roa (raw, json)
Hash identifier: znAhvb9YMdE3U+MR6yzO3hbqveVWOFSB/QGAVqIAxzI=
Subject key identifier: ED:0F:29:A5:A8:69:DA:7D:42:EB:74:BA:5D:F3:22:EE:99:00:CA:4B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584898D6173459BBEE3FC51BE380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 7029
IP address blocks: 71.31.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:17:34:59:bb:ee:3f:c5:1b:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=bda91e10-17cc-4c7f-af82-c1e0198571ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:d3:3e:9f:97:0a:58:56:f9:60:3c:87:a7:
32:76:95:09:4b:78:1b:79:7f:66:f5:1d:ad:46:02:
1e:f3:59:c8:e4:69:ac:3d:f0:c3:6f:91:4e:f6:f1:
57:00:06:b2:20:67:e7:e6:34:1f:9c:f1:84:9d:e0:
e1:29:8b:1b:c3:42:dc:55:a6:59:72:44:2f:01:14:
e9:be:0c:d2:e2:42:6e:f2:05:02:ef:f8:c3:81:ad:
3c:aa:45:f5:a0:90:da:f2:75:dc:58:2d:f9:50:30:
ce:8e:27:5e:58:23:6b:68:da:8e:42:b1:82:50:cf:
82:e4:9d:b6:45:23:ca:a0:62:a2:67:cf:eb:1b:2e:
16:a5:23:32:4e:e6:2c:fe:ab:99:fc:d0:db:13:7c:
04:88:23:5b:96:63:e4:81:be:cd:06:b7:a0:b0:11:
2b:f1:f8:6a:d9:8e:3f:cc:4f:59:fc:1e:19:1a:25:
c6:eb:1d:72:b8:d0:6f:c9:46:0d:42:45:0b:9e:80:
f0:db:4b:f7:0b:34:dc:fb:da:dc:1d:2c:65:78:f4:
5c:79:33:b0:ef:45:37:7b:ad:6d:5c:72:e3:e0:e1:
64:24:7f:b9:e3:e6:b2:bf:54:8e:8b:87:2b:79:fe:
82:a3:fc:c8:83:ca:22:6b:dd:64:a0:d7:aa:91:17:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:29:A5:A8:69:DA:7D:42:EB:74:BA:5D:F3:22:EE:99:00:CA:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0f:70:c2:67:f7:f8:a5:f3:eb:26:33:9b:4d:14:78:27:4c:
65:df:70:2c:f8:2f:21:c5:93:c1:df:11:f1:74:42:ee:90:a1:
f6:be:99:f8:1d:e1:a3:fb:50:ac:1a:b1:fe:c4:43:dd:79:ad:
9d:b6:92:8e:9c:06:64:ef:77:23:ed:37:66:ae:4a:e3:30:43:
33:a2:41:3f:73:1c:0c:17:dd:0c:04:d5:32:6c:3a:1e:3f:77:
63:88:10:90:4e:97:f8:7a:c8:1e:57:ca:c2:27:87:d8:63:5d:
0a:08:79:bd:7d:90:ba:28:a2:c5:8b:42:27:ee:c4:e5:4c:2f:
5e:09:2a:26:55:7d:6c:19:12:ae:16:fa:05:3e:58:42:92:6e:
66:cc:d2:6e:10:94:01:e3:8c:c2:e6:b0:7a:9c:93:e3:19:9b:
98:98:a4:91:0b:20:9f:ef:42:e6:dd:c6:c2:5e:ab:1e:89:07:
05:9d:34:f7:37:fe:78:d5:85:72:82:69:59:ca:d8:05:4c:dc:
f1:9d:e3:ea:30:92:7d:7a:fc:29:f3:62:1c:71:62:55:fe:5e:
2d:b4:43:ad:d8:2c:bf:fb:06:df:cc:dc:00:b0:13:90:70:49:
42:4d:7a:7c:1b:17:4a:89:0f:10:ad:8d:42:d2:ce:5e:e3:91:
15:61:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:35 2025 by rpki-client