Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa
File: fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa (raw, json)
Hash identifier: 88TMQPFWUQjsBhZJDX0GD36rJhOgSNvn2lGZlpSvAls=
Subject key identifier: 8F:15:92:9B:07:0F:D5:4E:5F:72:89:1B:A2:69:B9:9F:58:99:87:AC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112D467984572F7CD3AA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 22050
IP address blocks: 173.188.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2d:46:79:84:57:2f:7c:d3:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=652c63dd-c4bb-4a91-a572-282272b6e698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:d9:fd:c7:68:ac:f6:93:58:b3:eb:8b:03:
3b:37:60:0f:0d:60:2e:2e:e4:77:5f:a2:38:29:11:
be:c5:f9:94:cf:f2:c2:49:c4:27:45:49:6e:09:36:
d0:7b:a8:49:7c:8d:d6:21:eb:1a:32:35:43:8a:20:
bf:e5:7f:a0:7b:f1:05:f7:2d:82:1b:f9:49:94:1c:
fc:1d:f5:87:69:fa:35:5e:4c:03:1f:9b:30:86:f8:
ab:bb:d0:59:f3:e3:19:0d:9f:02:b5:a0:0a:ad:88:
4c:91:91:04:ce:50:a8:d5:3a:7b:45:4f:2d:b8:3e:
75:13:67:a1:de:02:ca:29:78:c7:60:3b:84:e3:45:
0b:d1:00:ea:0f:e6:d9:14:6c:aa:76:6b:9a:c3:4c:
a4:e9:3c:52:35:62:02:2c:80:e4:96:a2:19:85:1c:
7b:94:7b:09:6f:41:a3:3f:0a:eb:15:c3:62:59:d3:
76:0b:02:fb:d4:6e:39:c7:10:7f:4a:f8:51:d8:26:
6d:9e:cd:6f:04:6a:0f:46:ef:5d:2b:71:8f:a9:8c:
da:af:eb:a4:2a:af:09:e2:d8:a6:e9:bd:00:f8:b3:
02:04:4c:8a:cb:7d:a5:ec:cd:7d:f2:71:b6:e1:88:
10:50:4a:c0:e6:0d:b7:72:3b:00:b5:70:0a:55:42:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:92:9B:07:0F:D5:4E:5F:72:89:1B:A2:69:B9:9F:58:99:87:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:42:a9:02:6a:4c:30:8a:ac:f9:15:99:6c:ae:08:13:31:0f:
76:d6:03:2a:5b:6d:f2:94:76:42:0f:ae:16:88:24:a9:3a:ce:
bc:fa:2c:75:47:96:da:61:59:3b:7c:5b:a2:e0:ee:5d:45:f7:
19:51:41:0d:18:94:9d:23:1c:d0:de:8e:19:19:8b:0e:3d:9c:
a8:d6:5c:57:bd:c6:90:77:e7:a7:3a:cd:fb:03:34:db:10:03:
17:98:dc:87:4a:11:ac:9f:b1:ef:65:00:02:92:f6:c2:62:27:
52:08:f9:3f:c2:2f:30:d8:72:38:d2:91:82:fe:32:b3:18:28:
21:79:05:be:e1:c1:85:f8:af:bc:5a:5e:62:66:3f:24:ca:e9:
21:57:0c:6d:e1:ac:92:15:86:45:78:49:c0:46:eb:3e:31:c3:
7c:6d:84:dd:6a:df:37:e5:a2:0c:7a:4c:23:46:10:8e:f3:83:
af:13:17:1e:0a:44:7e:8c:ad:31:c0:81:35:74:af:b2:57:fc:
50:1d:1d:e8:7c:76:36:10:0d:be:f9:95:ba:bc:00:db:ff:89:
0e:98:fa:76:18:aa:cb:6d:1e:5c:45:bd:4a:83:b8:a1:cd:4b:
d6:bc:a5:0c:c1:58:15:a4:a8:ba:fc:9b:09:a3:02:5b:40:0b:
9d:68:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:03:55 2025 by rpki-client