Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4141b05-3c99-3589-8111-c183d6fd4bb0.roa
File: e4141b05-3c99-3589-8111-c183d6fd4bb0.roa (raw, json)
Hash identifier: x5LjY7dgnaBveQ+8xdcMWoaRYx6xn4HQmYov7p7Q9WI=
Subject key identifier: 82:CC:43:B3:CF:FD:77:C4:46:AA:7A:A8:26:A3:3A:5C:A6:9B:01:74
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE1198E56207141D1A6DB40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4141b05-3c99-3589-8111-c183d6fd4bb0.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 173.190.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:19:8e:56:20:71:41:d1:a6:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=6de0eaed-8a04-4294-9b80-4ed73bab9fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:cf:39:00:2f:a7:ff:35:1b:49:52:8f:77:
cf:78:13:d7:69:ee:d4:d0:0f:79:4b:4f:c1:19:62:
f9:7f:22:9f:69:7c:16:1c:c5:28:48:95:1a:e7:6b:
44:9e:cf:cc:06:62:86:0d:4d:0f:83:f2:b3:69:0e:
06:bb:38:23:2c:9f:f6:8b:53:dc:f1:4d:16:6d:d8:
ae:c1:28:7d:fb:92:25:96:55:8a:b8:56:8c:10:02:
4a:5d:90:86:56:e0:ab:67:0c:5d:f5:48:e5:28:d0:
4f:6b:47:2d:6f:a3:69:a9:84:81:69:57:39:d4:ee:
41:7b:45:86:15:66:23:cc:9f:5e:9f:35:aa:cd:7f:
55:02:69:bd:c2:9c:6a:32:4f:b8:29:34:75:f2:f6:
53:26:da:b8:3d:b6:12:44:2c:ed:0a:4d:67:e8:57:
9b:10:05:ff:a1:86:2e:d2:e5:5d:45:86:2b:d3:1d:
8e:41:6d:50:df:79:d4:d4:2c:21:a6:52:70:8e:f8:
1f:c7:de:af:95:2d:39:34:7a:89:1b:ce:92:a9:26:
25:39:50:f9:da:7d:7e:8b:17:31:e1:d3:a6:d4:3a:
fe:92:fc:a9:3f:3a:3f:70:19:65:32:40:71:b5:f1:
cb:39:b4:cb:53:8b:31:0d:d0:f7:f1:2c:0a:1a:3e:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:43:B3:CF:FD:77:C4:46:AA:7A:A8:26:A3:3A:5C:A6:9B:01:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4141b05-3c99-3589-8111-c183d6fd4bb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.190.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:1b:14:08:c0:7c:8a:fd:40:31:e4:ec:ca:0e:27:de:e0:b6:
6e:4c:6a:5a:9b:00:ab:29:62:c1:04:d5:fc:7c:06:d5:17:a3:
d3:26:48:51:9b:be:01:e7:11:af:c3:24:7b:a2:89:d2:b7:7d:
98:57:14:f7:d5:84:2c:95:fc:4f:05:ee:01:cc:05:a2:b8:48:
6d:56:29:3a:49:da:ca:d6:5e:93:1c:af:b0:b2:d1:75:2b:91:
f5:d1:e9:be:3b:84:ee:0c:76:82:2a:a3:53:56:e1:19:21:64:
9d:1a:1a:f3:6b:02:b9:51:31:38:ec:d8:87:4b:48:21:ac:30:
0e:ff:01:20:87:9f:76:9c:39:3e:e1:50:b9:dc:17:d1:64:64:
05:80:ee:c3:0b:79:a6:21:eb:17:17:91:27:80:5f:3e:56:7f:
fe:72:63:96:7f:d4:18:1a:29:01:95:ca:7f:b8:c8:ef:bf:03:
96:93:25:2f:1b:e5:3f:ef:07:69:90:3f:36:73:3b:3b:2f:05:
50:a3:f7:89:a7:81:bf:db:73:18:de:52:b4:6e:cd:04:f9:75:
2c:30:b4:5f:9d:cb:5c:d5:d6:ba:5b:bd:f2:82:00:9d:dd:9d:
61:71:0a:18:3a:5e:b0:df:45:f9:2b:ff:d0:6d:99:17:da:a8:
2e:62:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:27 2025 by rpki-client