Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa
File: e38090fc-da46-3531-9381-e5b4953d080a.roa (raw, json)
Hash identifier: iea8MYKs4a0JBZGZxhpru7ix50LvfbGnA0aiZTzizjA=
Subject key identifier: 69:5C:6B:06:74:39:AA:36:FF:29:34:45:15:9B:01:33:B8:BC:F4:91
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30A216FEA47882CFD79700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa
Signing time: Tue 21 Jan 2025 20:38:24 +0000
ROA not before: Tue 21 Jan 2025 20:38:24 +0000
ROA not after: Mon 21 Apr 2025 19:38:24 +0000
asID: 7029
IP address blocks: 173.188.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:a2:16:fe:a4:78:82:cf:d7:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:24 2025 GMT
Not After : Apr 21 19:38:24 2025 GMT
Subject: CN=8e23f118-203c-4ee5-ae68-064e56927fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:3b:20:2b:72:5c:52:c4:24:20:14:c0:a1:
11:c3:f8:e2:6b:7e:ad:76:3e:b4:7c:ce:e0:28:72:
a1:0c:92:31:a9:8c:ce:9b:ff:44:a2:4b:b3:19:35:
e7:5a:b0:8a:09:36:f8:0e:bd:5e:e2:15:93:84:f2:
aa:78:ae:67:96:ea:1e:84:96:58:07:40:fe:a4:91:
86:e7:02:eb:d6:49:46:82:d4:f4:f0:3c:5c:e2:2d:
ab:61:77:19:58:e6:99:48:aa:04:41:70:04:ef:3c:
47:65:ab:26:f3:2f:0f:a1:e2:04:89:d6:2f:eb:b0:
e9:77:e8:54:e1:d6:ee:2f:40:33:88:fc:37:23:bc:
38:f5:56:3a:a9:bb:b8:92:2a:88:cb:0f:ff:f3:43:
d9:bb:90:7c:dd:dd:b8:1a:0c:f9:8e:46:f4:c5:f4:
f9:0b:a7:46:90:b1:57:98:34:e2:82:8e:50:62:63:
47:83:98:96:7a:f5:55:f2:26:78:ad:1b:87:ee:07:
51:19:e2:b6:3e:bd:e3:34:bf:f2:96:00:4b:44:6c:
09:39:8e:b8:ae:a3:0d:b2:cc:9d:65:bd:91:cd:08:
28:98:11:06:2a:07:7c:b2:d7:f5:7c:8b:8b:b3:e0:
48:fb:3d:65:b6:b6:88:e0:70:3d:8c:3c:e4:5d:84:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5C:6B:06:74:39:AA:36:FF:29:34:45:15:9B:01:33:B8:BC:F4:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:0d:5d:8e:4f:de:db:95:2d:d6:56:6b:6e:ef:68:f3:0b:16:
c2:32:fd:cb:74:8d:81:a8:8f:da:ad:ad:37:0a:96:da:66:25:
ed:57:ba:57:52:62:31:15:f7:90:5d:98:97:6b:6d:dd:17:c4:
f6:ce:ac:80:48:23:22:3a:02:cc:a0:9c:31:f3:5e:c4:d7:82:
55:d6:94:77:28:e1:3a:51:13:64:d1:be:9a:fd:2e:e9:3a:4a:
2a:94:13:bd:27:ac:77:4d:8e:82:58:8e:7f:f0:b7:88:c3:f0:
ed:f8:4b:a0:db:e6:04:42:2d:ea:ad:d2:4f:e7:a1:aa:6e:70:
f5:9c:87:af:24:bf:59:ab:11:d9:1a:33:4e:f0:5b:72:e3:d6:
72:ce:56:0d:1e:dc:3d:ea:67:52:a0:25:d5:5f:fc:9d:4b:fa:
ba:55:ee:42:cb:88:af:e4:04:7d:d7:bf:d1:4b:ec:b3:c6:bb:
ea:2b:bd:6a:f4:bf:66:9f:2d:91:79:e2:f6:57:42:57:04:e8:
b6:4b:7c:73:17:76:69:85:7c:45:85:55:fe:c8:20:5d:d6:f0:
df:af:11:7f:15:10:5f:5b:d8:2b:56:f9:2c:6d:aa:50:18:f1:
e7:4e:7d:a5:81:71:3a:f8:94:c0:65:e9:4c:be:ff:24:2a:c1:
40:f9:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:21 2025 by rpki-client