Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7973aa01-2397-34c2-ab71-25917a8d7516.roa
File: 7973aa01-2397-34c2-ab71-25917a8d7516.roa (raw, json)
Hash identifier: fuGG44gwgWTn0StlLGmGnztXD+y4/BllzwpQGEQlt5Q=
Subject key identifier: 69:0C:5D:44:A3:15:5F:84:78:CA:AE:63:29:EA:7F:86:2E:23:8E:5C
Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial: 010D0C9F432858494E2EAEAA25F33009F1EC6800
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7973aa01-2397-34c2-ab71-25917a8d7516.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 11377
IP address blocks: 50.31.32.0/20 maxlen: 20
50.31.48.0/20 maxlen: 20
159.183.244.0/22 maxlen: 22
159.183.248.0/22 maxlen: 22
208.117.48.0/21 maxlen: 21
208.117.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ae:aa:25:f3:30:09:f1:ec:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=2593f1b1-3813-48e7-8e6e-7f41fd26a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:cf:94:75:6b:60:2e:35:65:70:d5:e8:10:
9e:10:2f:62:24:d1:00:b3:cd:2d:58:5d:b7:c8:08:
c5:70:e0:7b:f7:77:f7:52:e8:4d:50:73:0b:7e:b0:
23:e9:41:d0:5e:25:e8:af:0f:d3:b4:51:76:5b:b1:
53:2f:5d:e8:1e:31:47:43:22:58:b7:b1:cf:fa:b8:
c1:6e:ee:9d:fb:c8:a4:04:e6:11:33:44:e6:c4:3e:
f4:a9:e6:db:cb:e4:c0:9a:87:25:a2:f0:b8:5e:3b:
6b:90:ec:a3:ec:35:b3:fe:9b:dd:73:31:ad:27:b7:
eb:ce:a6:85:aa:fe:19:b0:65:1b:85:4b:f5:ef:85:
d4:24:1a:72:dc:32:75:e5:bd:1d:5b:65:f0:b8:15:
ff:89:2f:f5:79:ce:df:9d:f9:ab:5d:bf:d0:ea:e6:
76:31:58:a0:e8:35:20:3e:ab:01:ec:65:b6:b0:7b:
69:8d:e1:46:72:92:f5:a6:e3:3f:92:eb:62:74:af:
46:88:60:16:b3:50:18:15:5e:eb:74:88:2e:3b:af:
8d:04:f4:23:8d:f4:36:16:57:f7:eb:64:dc:13:ec:
d5:83:8d:40:b4:03:f7:4b:ed:8d:7e:e3:e0:2f:63:
ee:ed:ff:6f:43:46:15:cf:53:4c:17:d9:ed:56:f8:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0C:5D:44:A3:15:5F:84:78:CA:AE:63:29:EA:7F:86:2E:23:8E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7973aa01-2397-34c2-ab71-25917a8d7516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
X509v3 Authority Key Identifier:
keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
sbgp-ipAddrBlock: critical
IPv4:
50.31.32.0/19
159.183.244.0-159.183.251.255
208.117.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b6:37:fe:59:ef:2c:78:80:3f:ef:05:c7:e7:8b:ea:7c:4d:
53:eb:4b:18:b4:0a:31:32:37:46:48:6a:1d:f9:5a:16:2b:e0:
46:0c:c8:88:3f:4c:6a:09:72:4a:db:59:0b:05:15:03:83:6a:
82:5c:db:cb:8c:32:9b:29:8c:89:c4:20:65:3f:08:9a:28:73:
51:00:0d:cb:be:32:3c:dc:f1:df:ee:ff:b4:3b:a3:e1:1d:f0:
44:76:17:c6:aa:b6:46:c2:d4:73:ac:2e:84:bd:d7:40:62:6e:
1a:99:2f:52:59:83:b2:00:c6:42:75:5f:5a:d5:96:c7:03:49:
04:1d:87:08:32:08:fa:dd:d9:86:5a:2a:0f:96:de:89:79:7b:
ce:42:2a:4b:30:a0:02:1a:70:da:85:12:9f:f3:e3:e8:e3:b3:
75:90:d1:bd:48:b8:6a:31:21:80:95:fa:61:d8:0f:8b:c1:b1:
04:14:18:6d:47:1e:ec:e8:cc:ea:b2:84:2d:27:36:49:5d:21:
11:02:38:43:eb:b3:5e:3e:1e:53:0d:e6:f2:d0:0e:cc:a7:3b:
3d:7d:bd:f2:7e:b7:76:f4:1d:48:e2:eb:ec:b6:ef:57:86:20:
7c:b2:29:a2:00:d1:18:08:f7:e0:4c:b6:eb:99:74:87:7a:e9:
54:7d:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:58 2025 by rpki-client