Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa
File: 2a09d5aa-ff44-364e-8546-bc3f9845a726.roa (raw, json)
Hash identifier: C6xoCYVzJ3PY5QW7CYfB6iy7qU+HhAbaeG9/888oW5E=
Subject key identifier: CA:B9:E3:FB:DF:05:18:10:D0:65:AC:75:9C:31:C9:30:2D:BF:C5:86
Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial: 010D0C9F4328584886B07B01F7AF391BA3946DB0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 6181
IP address blocks: 72.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7b:01:f7:af:39:1b:a3:94:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=4bbcb889-d736-446b-9565-0f47d10e7c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:2a:ab:1d:92:be:36:7b:14:7e:f6:ca:5e:
97:e8:ce:a7:41:30:ee:e0:23:f4:c8:65:db:e6:11:
b5:a5:20:68:32:3d:8e:c8:a0:6c:2d:a3:49:02:09:
55:a9:79:1a:d9:8f:ca:26:a1:e0:e2:7d:86:01:9a:
3d:c4:70:cc:39:82:e1:5f:10:41:be:c4:8e:5b:8d:
d2:cb:de:e2:fe:70:a6:c7:c3:46:89:88:61:bb:1e:
85:da:b0:23:58:0a:16:9a:ba:0f:c5:14:c4:92:c9:
89:a6:3d:c4:95:8a:a3:ce:03:9a:9c:0a:8a:09:f4:
0f:e3:ab:2f:b3:f0:36:3f:97:80:f4:77:cb:4a:e2:
43:c0:ae:77:19:ee:d7:47:6f:c1:90:e6:12:a5:89:
b0:46:a3:fa:39:9e:16:84:a9:57:38:c5:b6:5b:47:
c1:5b:69:5c:c2:50:a7:2e:b1:c4:4e:96:02:cd:04:
fc:82:e9:f3:48:a2:21:11:8d:ae:58:1e:1b:6e:4e:
b5:d1:fb:79:33:9d:31:e5:28:14:18:6e:d0:70:0f:
43:06:35:d1:df:6c:86:9b:50:6c:56:b3:29:c2:41:
c6:f8:4c:5a:e2:45:45:65:27:f0:8f:80:c5:4a:34:
59:0f:a7:a1:18:2c:34:58:44:68:ce:67:a3:f6:90:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:E3:FB:DF:05:18:10:D0:65:AC:75:9C:31:C9:30:2D:BF:C5:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
X509v3 Authority Key Identifier:
keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
sbgp-ipAddrBlock: critical
IPv4:
72.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0a:c1:16:3b:3d:a3:e5:2b:08:15:1e:94:5c:8e:21:14:0b:
33:12:ef:af:ab:38:7e:b2:a9:b4:18:6c:fc:e0:2d:16:79:b8:
c0:35:5e:ff:fa:57:59:ff:96:90:50:c3:40:b4:c2:00:72:b9:
dc:ff:16:4c:16:62:50:7a:5b:57:af:ba:fc:83:de:66:29:d4:
6b:9e:67:c2:21:77:ae:f4:95:67:de:ba:7c:42:04:c9:41:ae:
64:7f:35:20:95:d5:53:da:0e:36:a5:39:b6:18:31:62:b7:35:
20:f8:4e:26:bf:41:f4:cd:0f:9d:0b:21:7d:b3:8e:06:71:4f:
76:35:0b:c4:dd:ae:b9:91:4c:a9:0c:4e:b0:23:5b:cc:8c:f3:
90:be:30:13:bc:d8:1e:b5:d2:2c:b8:c3:b4:a4:e8:4a:e5:d5:
ea:9c:e4:67:7c:84:52:02:72:db:e0:3c:50:54:75:eb:04:2f:
82:58:ab:f0:31:8d:c8:86:df:38:ff:22:25:76:d1:6c:5d:99:
a7:80:09:4d:fd:4e:71:4b:fe:32:99:17:59:06:75:6b:be:7e:
f9:0a:7e:d0:6e:b8:64:d3:22:e9:01:26:eb:93:cc:ab:9d:bb:
53:a9:40:30:ac:63:1b:a2:ea:fa:87:14:91:e6:1f:57:42:eb:
32:37:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:35 2025 by rpki-client