Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6ad3934-5def-36fa-b599-9684664b4032.roa
File: e6ad3934-5def-36fa-b599-9684664b4032.roa (raw, json)
Hash identifier: srGyBpCgUZLxdZPi1COxEtSkltALZWb/dwkh8pSqxE0=
Subject key identifier: 01:D1:C0:2B:B3:09:A2:2B:B0:BB:6A:DC:F1:F3:15:D1:AE:15:15:4C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA10E3E7B618382096D300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6ad3934-5def-36fa-b599-9684664b4032.roa
Signing time: Thu 20 Feb 2025 18:15:10 +0000
ROA not before: Thu 20 Feb 2025 18:15:10 +0000
ROA not after: Wed 21 May 2025 17:15:10 +0000
asID: 7029
IP address blocks: 75.91.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:10:e3:e7:b6:18:38:20:96:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:10 2025 GMT
Not After : May 21 17:15:10 2025 GMT
Subject: CN=1d87835c-e0e6-4a43-be66-5b33395e69f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:a8:0a:67:07:e6:18:7a:36:9b:c5:b9:5e:
22:b1:45:ac:1d:fd:f2:93:ad:5c:6a:36:c0:a2:19:
19:28:9d:84:2c:98:b4:48:53:36:1d:46:51:6f:be:
2e:e5:eb:d7:0c:72:8d:cc:28:4a:af:4f:82:0e:ec:
07:be:38:79:c5:87:35:28:0f:e1:c2:a8:c1:a4:af:
bd:58:97:cf:c9:be:19:97:9b:49:2a:7f:cb:80:7d:
f3:a8:35:0c:19:36:bf:3c:07:8f:e0:82:da:53:b5:
1b:ef:fa:9d:44:af:bd:8b:bf:b9:2c:5f:a8:f3:ef:
8b:93:cf:58:ba:93:20:3e:b8:d5:5d:8a:10:02:90:
c1:5b:7a:45:3a:f3:c3:e6:ca:28:94:70:28:87:1c:
fd:94:99:27:f5:ed:f8:7e:a1:8c:fd:a7:bb:e4:99:
eb:00:77:78:bd:c7:1d:b3:6c:68:57:76:71:4c:28:
af:59:ac:46:f2:22:c1:05:9a:ac:fb:73:df:51:38:
f0:7a:c6:76:c0:53:b3:51:b0:cb:b1:61:dd:0a:48:
9f:85:df:9d:13:b1:80:27:d5:a8:74:09:a3:72:56:
b7:6e:4b:32:04:b7:fa:d0:0f:7a:fe:ba:be:cb:f4:
38:d4:5d:17:05:86:f8:a5:fc:e7:e8:34:40:a0:5b:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:C0:2B:B3:09:A2:2B:B0:BB:6A:DC:F1:F3:15:D1:AE:15:15:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6ad3934-5def-36fa-b599-9684664b4032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:33:e9:98:ab:e6:fd:44:a9:60:6b:fb:74:3b:82:4f:16:a4:
97:16:79:90:e3:67:02:a6:09:ad:02:44:98:da:d6:91:c5:d1:
38:c4:15:de:61:dd:81:50:d5:bc:44:28:cf:2c:fe:09:e5:a0:
42:97:d4:2c:67:64:37:e7:84:c6:49:7b:4c:12:c6:b7:83:b8:
0e:e1:67:12:f9:03:0d:08:77:7c:c2:9f:42:fd:72:86:3f:c8:
b3:07:67:66:90:4d:1c:2b:18:39:7f:91:01:5d:69:a3:fa:27:
88:31:e3:3d:2a:e7:3e:4b:19:b2:4c:df:91:d2:d4:2f:44:ea:
f9:5b:36:2c:ef:a4:cb:83:95:6d:5f:07:e2:e0:01:8f:d0:51:
39:80:d6:de:8a:eb:86:27:ba:54:99:ad:43:db:63:1d:11:31:
1c:c1:ad:44:b9:ab:a6:0f:d9:8d:a0:35:14:17:af:32:d2:ef:
a9:16:e9:36:19:00:2c:99:64:d0:74:ef:14:71:5f:c4:d1:ce:
6d:40:2a:9f:bc:23:1c:3a:17:34:a1:de:27:ea:ec:a4:40:d4:
9d:97:a9:74:1f:e4:4a:52:2c:da:c3:23:1e:6e:39:2d:6a:b8:
d3:53:2e:fb:a0:87:0f:1a:af:fb:c8:3a:b7:04:11:7e:d3:2d:
0b:c2:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:39 2025 by rpki-client