Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/c3cab3c2-086b-34a3-8657-441ffff04b60.roa
File: c3cab3c2-086b-34a3-8657-441ffff04b60.roa (raw, json)
Hash identifier: iRx1W+lE/9cGUm7dBgxz2YwPq6wYoU7892zaJy98wR4=
Subject key identifier: CC:A6:97:BF:0D:EF:BF:F5:2A:C8:41:43:59:16:22:7C:A2:9B:37:BB
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69DDD1A3F0D3F78F8EE00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/c3cab3c2-086b-34a3-8657-441ffff04b60.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 50.21.176.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9d:dd:1a:3f:0d:3f:78:f8:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=8a4a02f6-95d5-487b-876a-2b821171763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:69:d4:93:2c:eb:7b:b0:86:32:c5:e9:d3:
cc:1e:ac:8f:43:94:8f:05:7b:d1:6c:b3:50:63:91:
da:65:11:51:b9:e3:d2:ef:a2:ce:5f:00:09:df:49:
0f:22:88:12:e2:e4:3a:22:98:57:4d:1d:dc:0a:45:
95:73:26:41:68:5c:98:18:76:4a:d5:cb:8f:42:00:
38:38:c5:74:63:ae:51:f3:a3:78:54:92:f6:0b:a7:
1f:27:42:7d:55:b7:45:04:56:7b:81:76:f5:02:77:
8b:88:75:6d:4e:3e:01:5d:3d:5f:31:14:28:47:32:
2f:bd:af:69:28:4b:2f:0d:e6:6d:7f:3c:18:86:97:
e6:77:67:b8:6e:4e:a5:b6:db:8e:7a:c7:2f:ec:30:
c8:74:09:b8:c0:bd:d1:30:84:19:45:a2:c5:0f:3f:
0d:fc:38:bb:e6:bd:46:07:5f:5b:86:af:00:40:d7:
b6:0e:8d:85:c5:bd:df:e5:45:6f:bd:16:b7:ce:19:
92:c0:30:8d:0f:1b:bc:6c:69:1d:cc:1a:9a:61:f2:
02:50:16:ac:bf:3c:b8:b7:37:3a:47:a6:a8:5e:15:
19:19:6b:d4:56:2b:18:67:3a:0f:cd:c7:52:22:b8:
ef:80:91:f5:21:65:c9:d8:e3:06:72:47:b2:7a:52:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A6:97:BF:0D:EF:BF:F5:2A:C8:41:43:59:16:22:7C:A2:9B:37:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/c3cab3c2-086b-34a3-8657-441ffff04b60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
50.21.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:94:ad:32:72:44:65:58:2b:2b:61:a6:ec:e5:72:7d:ec:aa:
8b:c6:99:d2:02:a8:ca:29:42:5a:42:6e:a1:3a:62:9d:c0:73:
64:b7:b1:a9:ba:28:89:d8:c8:da:96:83:2a:b3:6f:ed:1a:8c:
af:d4:6b:fd:a4:e6:2d:2b:4e:6c:92:4a:15:00:47:9f:26:66:
1e:fc:93:95:8f:eb:97:94:5d:0f:b7:73:31:41:26:e8:f6:41:
37:f7:ba:03:0c:c7:4a:66:23:56:4e:86:ff:ac:ed:a1:be:c9:
e9:2d:89:62:48:70:2a:28:5c:c2:d4:16:39:a4:e7:75:e7:6d:
8d:08:4d:dd:ba:07:a2:88:ea:b9:ce:11:c8:8e:c2:ca:77:c7:
cc:70:18:c8:31:19:97:78:ad:8d:8e:16:8f:d6:eb:49:5f:f3:
0c:27:17:86:6b:b8:92:c3:af:74:28:3a:b3:4e:aa:4a:b2:c2:
32:76:26:26:6d:57:19:00:aa:7e:19:09:d9:61:de:ef:0f:39:
80:a3:e9:82:24:1a:37:36:67:55:89:61:e5:62:bb:e4:54:87:
35:d3:d9:1a:ce:c6:b7:35:1c:b3:ad:93:dc:43:c5:1f:c2:fd:
1a:ab:92:6d:77:a9:fb:ba:51:07:f6:5b:11:81:1a:73:a4:3e:
7c:2a:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:08 2025 by rpki-client