Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa
File: e84585a5-4a69-301b-9de8-1242f9d90bed.roa (raw, json)
Hash identifier: 4Op6+ycmijB9OVlRhaxENd4Tc0mdzYqfDENisRgpcno=
Subject key identifier: 2A:CE:19:93:94:3B:9E:2F:E0:34:BB:16:B3:B3:F6:DF:4B:DE:94:F0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112D39FD12FA33BA3F0114
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 21881
IP address blocks: 66.153.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2d:39:fd:12:fa:33:ba:3f:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=398b23f3-f41c-4959-9199-d68414a53478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:34:0f:d0:20:32:48:f1:3e:70:bf:72:81:
5b:b2:40:82:33:b2:03:5f:0f:0d:fa:06:10:0f:81:
f0:5d:65:51:e6:6e:5c:78:58:42:72:fe:f5:1c:7d:
35:bf:60:ef:48:bc:0a:70:2c:7c:e5:71:ca:38:b0:
81:16:08:5b:80:36:ba:2d:15:36:0d:86:eb:df:a2:
94:28:cb:5c:fa:4b:12:76:5a:79:58:d2:90:bf:a3:
5d:28:2c:50:aa:9f:cb:a8:88:09:aa:7b:6f:a0:ef:
75:90:eb:c5:da:d4:66:99:09:4a:91:ad:71:9e:fe:
b0:39:56:9f:a7:66:f2:a3:4e:2a:11:8f:17:cc:19:
c4:96:4d:71:63:1a:df:83:ee:12:d2:bf:96:ec:92:
76:c3:0d:75:c1:17:f8:0b:8e:ca:65:6c:bb:8a:ea:
a7:43:4e:da:3f:28:f7:04:86:2d:fe:18:f5:f0:ce:
b4:5a:f1:9f:a2:15:02:ce:03:b1:c8:cc:76:fb:25:
cb:11:81:ef:3a:23:b7:6b:0c:ab:e4:3b:0f:f0:8b:
9e:94:88:85:51:98:de:0a:44:4d:b8:6a:4d:5d:34:
fc:e4:b3:95:4f:ee:8b:2f:66:39:c9:ed:34:db:48:
b1:7a:66:31:fc:8f:17:85:b4:71:82:de:ff:a0:a4:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:19:93:94:3B:9E:2F:E0:34:BB:16:B3:B3:F6:DF:4B:DE:94:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.153.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ed:30:aa:d2:20:81:ae:d3:c6:f0:15:7b:dd:99:2a:25:a7:
b3:ba:1e:38:08:02:01:bd:89:05:0e:67:3e:aa:0f:49:a8:14:
44:cf:6a:4c:0d:20:14:1d:55:48:10:b0:eb:c1:75:75:80:f7:
c0:e5:23:66:24:38:6a:da:43:ad:f1:0d:b8:87:e5:3d:66:64:
4b:e8:61:ef:df:ab:0b:f6:f9:e1:70:98:81:27:5b:2c:de:68:
62:21:68:91:ac:fa:ee:13:fd:f8:00:47:f0:09:1a:1f:d2:9a:
da:75:51:ad:57:d9:b7:29:49:e4:c1:6e:9e:96:08:1d:06:8a:
fc:2f:44:f1:62:99:3c:9e:0c:e3:44:72:26:81:e7:ec:33:6f:
7c:91:16:9d:09:f5:e5:29:24:09:3e:64:7d:fd:26:d8:51:bd:
b5:52:43:c7:48:e4:52:b0:ae:f0:ec:df:21:97:22:66:20:df:
68:e8:54:82:14:c0:3b:12:c7:45:7b:d7:6a:53:72:56:37:fa:
4e:87:16:0f:80:a3:a7:30:22:d6:75:65:0c:c6:30:7e:51:a9:
fb:dc:9f:d5:4e:bd:93:db:10:95:50:b8:95:92:45:e0:91:7f:
36:76:17:bb:97:8a:69:4f:ad:64:d1:22:fd:6f:50:eb:a6:24:
24:63:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:52 2025 by rpki-client