Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa
File: 46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa (raw, json)
Hash identifier: li3dDRbJr+TlFqLJqB9U01sbxEpQ/X3ptiQC6S3GZIw=
Subject key identifier: 21:02:37:D0:A0:E7:6D:4E:10:88:4E:E3:B5:74:22:90:3C:DA:8E:93
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858493ED3D2B61EB4554FEAEE61CC
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 29802
IP address blocks: 144.168.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d2:b6:1e:b4:55:4f:ea:ee:61:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=0224a993-4b53-4103-9463-09f4b314de13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:96:d2:a9:44:cd:e1:41:e6:72:77:24:62:
f3:0a:a6:96:bd:ec:08:9f:ed:48:08:8e:7c:75:b4:
fa:f8:20:74:6c:48:e3:fc:4d:61:3e:4f:cf:04:d2:
ac:c4:9d:ba:40:9b:0b:50:52:37:cf:aa:d3:4b:2c:
51:95:5b:5a:e6:15:ae:e0:9e:4d:61:e3:7b:ce:89:
44:fd:2c:d0:a3:9b:dd:cf:45:3a:d6:20:4b:47:f7:
be:6c:66:97:86:13:83:be:bc:5b:20:54:9b:1d:17:
18:7a:7e:c3:4f:d8:a9:16:1b:71:06:fa:2b:25:14:
dc:d3:b7:af:75:fc:9c:69:ea:c7:ad:66:45:1b:eb:
12:a4:3d:2d:2a:35:c3:9e:84:fe:50:f0:24:a4:12:
e0:9d:0f:dc:a8:4a:2a:ad:6e:ca:e3:01:6f:0d:ef:
2a:9d:21:d3:ac:90:03:99:5c:f0:5a:a4:eb:a7:06:
d8:29:c6:13:d6:9c:5c:60:b0:45:a3:8b:fe:39:3a:
ce:d8:ab:40:23:fc:8a:24:48:e6:78:85:79:1f:d5:
87:1a:9e:5f:01:5f:33:26:d3:f5:28:d4:b7:84:24:
29:b7:0e:be:86:75:4d:d0:2d:a9:c0:2e:6a:e6:4e:
9b:cf:46:30:b1:10:cf:ee:e6:6c:20:d7:1a:f0:26:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:37:D0:A0:E7:6D:4E:10:88:4E:E3:B5:74:22:90:3C:DA:8E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b9:97:c3:8e:1b:9a:fb:86:f6:c8:8f:72:68:6c:3a:89:43:
45:86:9d:a0:f2:ee:a6:4a:8f:a3:c6:c6:00:a0:88:7f:2a:a6:
21:c6:8f:eb:6c:b3:7c:ed:2d:ff:8c:5d:a3:68:e0:52:f4:b4:
b5:66:8e:70:9d:c8:4e:18:28:2d:99:8f:b7:0c:4c:24:86:79:
2e:3e:7f:98:eb:7a:56:c9:57:a4:b9:5f:82:6a:7a:c3:8c:2a:
8f:0b:ff:e7:ac:cd:63:b5:b5:8b:dc:99:60:b1:d7:8b:03:6e:
c9:a3:0a:d9:af:e2:7f:2a:0a:98:69:53:c5:46:fa:6e:06:47:
0d:07:9c:47:f6:c4:38:67:b4:48:f5:03:cf:f4:91:d8:22:3a:
a8:87:f4:b1:6f:7f:3e:20:ce:71:d1:71:a3:5e:4e:75:cd:b9:
c9:6a:82:b7:14:3d:f3:e5:df:1a:71:a6:43:43:75:93:48:73:
6a:d8:94:ca:0a:e9:8d:f9:18:df:ed:e3:60:82:a9:2a:b1:fb:
c3:c9:47:6f:3d:1d:dc:38:fb:d4:59:21:6c:7e:66:51:2a:c6:
d1:f6:4e:44:3f:28:94:51:29:74:68:4d:e7:29:06:4e:20:7c:
9f:e8:dc:99:e0:7c:29:d3:d0:df:fa:92:8f:63:c3:e8:8f:de:
de:a4:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:08 2025 by rpki-client