Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa
File: fcb87d2a-c770-3ded-9521-5c84bee112c2.roa (raw, json)
Hash identifier: 7f6cbR/S5VNsJk4naS4RDqhNlKRleDGYxOJGZGnH9X8=
Subject key identifier: 17:93:99:96:18:54:DF:0F:3A:98:F1:09:61:6C:60:8F:44:45:44:EB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D0ABB9DB1FB2720E3291AF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.191.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b9:db:1f:b2:72:0e:32:91:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=78e36cdc-365f-4265-937b-96350d8c5a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:c0:02:e2:0f:93:56:f5:62:b0:e8:d2:19:
b2:40:4d:a2:e4:20:20:80:1e:ac:e5:5b:76:3f:6e:
9a:30:25:55:19:70:62:5b:74:f8:bc:ef:13:c8:36:
d9:41:e8:80:da:d0:18:1c:42:a3:39:66:19:fa:c0:
23:2f:04:d7:34:60:79:e8:2d:fa:89:58:6a:73:80:
13:7c:2e:80:07:b5:1c:9e:f1:65:83:b3:c3:06:a5:
9d:4f:0e:11:a6:39:9c:89:2a:a2:c5:d7:a9:24:2f:
a0:fa:85:08:dc:21:90:91:e4:72:aa:cd:92:b6:9e:
aa:42:1c:9f:52:a8:a0:79:c7:3c:c4:4a:43:e0:d6:
bd:74:69:35:2b:7f:b0:78:83:47:0e:a1:1d:d1:ee:
91:8f:36:47:2a:c6:ef:e9:4c:02:67:94:a4:a3:16:
4a:99:5a:04:67:43:6f:81:be:f0:31:3c:b8:74:94:
2c:d7:20:38:5a:6d:28:b2:62:e7:de:c0:5b:f2:dc:
5f:ff:f8:5f:e5:de:7e:b8:07:61:ab:f0:0a:05:ec:
d0:4c:c5:e2:01:b3:59:5c:9f:8b:53:36:16:d3:02:
c3:4b:e4:e6:c2:87:b2:07:f1:18:d7:3d:45:03:7a:
96:6d:b6:df:0e:86:4c:6c:d5:9e:98:3b:89:8e:e2:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:99:96:18:54:DF:0F:3A:98:F1:09:61:6C:60:8F:44:45:44:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:39:d6:6e:d1:b9:a0:3a:a4:ec:1b:cd:e4:a2:18:d1:ad:95:
9f:a0:ce:82:52:4b:fc:80:c7:91:83:ad:a9:1d:ec:6e:8b:39:
4b:bd:91:34:d8:e0:6b:d5:60:8d:10:77:72:39:de:7b:42:6d:
00:d9:5b:51:87:59:61:c2:0c:4d:63:8b:07:fd:39:53:5a:3a:
05:4b:e0:f6:d8:68:a7:4c:51:2c:3a:ad:b1:fc:d6:72:08:e8:
32:4e:ee:f4:08:5d:b2:e0:d7:36:87:3d:70:f6:81:3d:4a:54:
33:9a:23:9e:cd:bc:2e:2d:0b:af:6b:39:b1:ee:08:21:e0:2e:
b5:75:66:b6:e8:a8:3d:88:0a:59:30:03:c1:6b:52:b4:71:14:
27:a2:14:54:52:e7:3f:17:ab:92:ce:48:0e:7f:ea:9e:cc:93:
58:c1:76:22:ea:1d:c3:93:f7:3f:0a:bc:3c:cc:4e:97:5e:f4:
aa:2c:81:ce:57:cb:78:c3:07:a2:85:4d:46:d2:f3:40:7f:57:
38:8c:68:7e:02:e8:31:f5:ba:99:9e:d8:1a:f3:41:d0:13:63:
c4:31:99:19:5d:23:7c:16:9d:19:2f:e3:2b:d9:15:a5:3d:b1:
b9:17:e9:1c:da:be:cb:ea:4e:e3:c6:69:f7:b1:ea:ea:d9:71:
21:e2:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:36 2025 by rpki-client