Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa
File: f08df877-a0a6-3b38-b4f7-a229952babc8.roa (raw, json)
Hash identifier: AsTJgyFZGXkLHKhZdiCqfRRu5TAobhhEX3uhQornV88=
Subject key identifier: 0F:F3:58:0D:1C:84:5E:60:A1:2D:C0:AB:38:47:E2:CB:7D:BE:66:50
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848E0069E9D2D542B9464A4D080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.30.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:9e:9d:2d:54:2b:94:64:a4:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=6a0a84ad-616b-4d29-8f46-439acee4508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e7:22:57:fb:22:a3:3f:08:57:d7:a9:f1:ef:
46:b9:30:10:88:34:ec:f6:3d:94:c5:fd:fd:d1:a4:
2c:47:f8:bd:40:ef:99:1d:25:c0:e9:f8:f4:3c:67:
fa:3f:1c:87:e4:71:46:dc:ba:04:c0:c7:c0:b8:3a:
70:be:e9:bb:0e:ac:ee:e0:70:70:9d:0d:5e:ab:65:
c6:5c:af:b4:63:7e:77:e5:44:f6:09:a5:58:d7:74:
e6:01:d1:00:37:8a:65:ee:40:2f:01:2c:52:52:ed:
7c:9a:3f:da:fe:34:89:18:39:12:c2:ea:45:b1:95:
7c:8e:4e:a1:da:47:3b:92:40:d5:25:bd:37:33:ac:
45:0f:20:54:58:a5:2a:08:25:d1:81:d1:65:5d:09:
16:0c:33:a9:61:6e:fd:45:00:a4:5f:e5:29:aa:df:
0f:d1:a4:6a:b2:ff:55:b8:2a:e3:bc:39:be:95:9a:
9d:0b:73:41:e6:6d:2b:11:2f:e2:a4:98:ff:29:4c:
fe:ca:da:f8:31:4b:b6:da:65:d5:a7:d3:8d:a0:e8:
1b:af:02:e5:24:d1:16:11:7e:9d:60:ae:f0:04:fa:
fb:ab:99:0f:3a:0f:1a:81:4f:12:27:c7:9b:4c:fc:
31:e2:20:9c:1c:0e:4a:36:86:39:9f:52:b5:b9:95:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:58:0D:1C:84:5E:60:A1:2D:C0:AB:38:47:E2:CB:7D:BE:66:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:82:c0:43:7a:b7:ba:2d:16:e9:41:31:60:24:56:c2:7e:1b:
2a:73:1e:cd:1c:a3:23:66:ed:ef:56:0a:bd:68:8b:a0:17:d5:
11:d3:1a:1d:ce:b8:cc:2a:cf:33:93:84:50:69:2a:ac:26:11:
32:b7:6a:18:c7:ba:4d:3b:43:6c:09:75:99:58:c9:d5:e6:6a:
1e:94:ce:05:63:74:f6:1d:cc:f6:5b:43:78:66:56:1a:0a:dc:
3f:4a:2b:be:b9:39:89:2c:b3:a3:20:3c:63:93:9e:2f:bd:d7:
29:ea:88:41:18:63:2c:06:30:99:e2:05:0c:4a:3f:dc:93:7f:
41:f6:dc:88:55:ae:80:f0:2a:89:dc:ec:e8:56:5c:57:bd:6a:
ce:cb:ac:cb:ea:29:cb:84:39:50:7c:45:2a:f0:4f:24:52:00:
36:ea:d1:08:17:9d:e6:1b:3c:73:0f:4d:6a:04:d6:32:50:0f:
8c:e4:2d:41:83:78:ef:5c:36:04:e8:b3:5d:77:06:2d:b0:d7:
db:ab:94:29:7b:1a:f1:33:fd:d8:42:e4:4f:d8:d3:f7:5c:b6:
df:17:44:03:57:b7:8b:8d:2d:89:43:8c:70:05:90:3c:f6:3f:
68:ef:88:ad:49:12:5b:89:56:29:1a:76:af:1a:a4:78:d5:89:
7c:a4:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:55 2025 by rpki-client