Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9e67789-8f0a-3911-8047-112389fbad76.roa
File: f9e67789-8f0a-3911-8047-112389fbad76.roa (raw, json)
Hash identifier: If2s1rG1pFeFzrwOvS/H/XHARKgd3N7moQDc5YKNv4U=
Subject key identifier: FF:D0:32:0A:4A:A6:E2:8B:F9:31:96:EE:3E:21:B8:05:6D:6D:EA:AB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D716A82AE9C6B9321821B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9e67789-8f0a-3911-8047-112389fbad76.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.29.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:6a:82:ae:9c:6b:93:21:82:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=6882c8a9-be88-40f2-90e3-6c9f434660e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:26:37:eb:ab:1d:da:88:5c:4c:0f:fb:2b:
ef:f8:27:d7:db:72:0c:d1:55:a1:29:a9:89:66:f0:
6f:fb:7c:07:21:dc:62:41:5b:5d:20:91:eb:a3:db:
3f:cd:f3:23:76:9b:f3:2e:50:59:f0:50:8c:62:4a:
0a:c7:47:85:9c:2c:ea:c7:9b:8d:ee:18:da:4f:ca:
05:88:02:ef:b7:ef:2d:8b:c2:58:f4:65:0d:4e:b0:
e6:03:5d:ae:7e:8c:b7:19:47:89:21:6e:4f:ff:b6:
cb:f0:99:89:40:ce:b6:98:bb:d1:ef:de:a6:2a:31:
a1:c9:cb:e3:50:b5:19:a3:be:76:81:19:d7:7d:b4:
1d:11:39:07:6d:ef:06:5d:86:25:b0:37:aa:ed:fa:
62:ff:2f:3f:de:c5:3b:51:00:8c:90:36:6e:70:36:
65:4f:74:4e:11:b6:65:e8:27:a2:5c:52:7f:5c:db:
90:80:99:1d:71:a4:ba:76:5e:1a:08:ca:0f:62:fd:
b5:c5:88:f8:7c:d9:f6:d9:dc:d2:d9:e6:0d:f3:da:
43:9a:d9:3d:36:86:68:58:38:f1:78:8e:f6:6c:a3:
97:58:75:ba:2a:a7:89:8a:b1:ef:2f:62:9e:b0:85:
f3:41:15:d0:07:15:ba:40:40:f8:07:69:31:1c:f7:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:32:0A:4A:A6:E2:8B:F9:31:96:EE:3E:21:B8:05:6D:6D:EA:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9e67789-8f0a-3911-8047-112389fbad76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:dd:29:4d:c4:96:c0:87:fc:6d:a5:80:f8:f7:30:23:78:13:
9d:1c:1c:d0:ec:27:c5:6b:c4:24:ad:67:14:ef:e7:13:62:05:
51:3a:5a:22:04:86:ad:a3:7a:84:78:ac:55:71:f8:48:8d:06:
83:d6:eb:16:c6:fd:7f:df:06:65:fe:86:d9:48:2c:01:9b:6b:
02:99:05:83:4a:05:15:7b:02:8f:37:cd:6c:41:d7:47:41:07:
1d:3c:f6:c8:d7:17:64:b7:ad:f1:4b:a2:35:aa:09:42:9b:7b:
70:a5:85:02:92:2f:d1:6f:4a:a0:f2:62:ed:17:ff:2e:00:44:
12:a1:25:63:3a:a3:f4:7a:8c:a1:93:c9:3e:67:be:8c:80:a4:
c7:00:d1:00:34:78:fd:4d:5c:82:26:bc:9e:3f:a7:04:ec:01:
81:4e:9b:f2:8a:fe:b2:2f:a7:e3:9a:14:3d:d3:be:6c:e3:fb:
b0:4c:80:fb:0a:d4:03:10:f3:3d:37:2e:5b:4f:3d:4b:c4:65:
a2:fc:7b:07:93:d2:8c:6e:2f:6d:11:59:d5:aa:fb:2b:2b:b6:
ea:f9:3c:28:c0:a0:54:9e:28:8c:af:ee:66:b0:bf:9d:b4:06:
59:2b:0c:d6:34:79:b4:5f:11:6b:49:9a:ec:e1:81:70:bd:6b:
77:7c:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:02 2025 by rpki-client