Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa
File: 3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa (raw, json)
Hash identifier: k28sfpLFsGgSFvMWoO/Pa/WrwCV5pe8DKgBNbkv706s=
Subject key identifier: 44:C2:E5:A3:D2:F3:F1:B4:E8:E7:9C:1E:F2:67:07:F0:1C:85:1B:BD
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848A830B5C89979695BA319E200
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 30058
IP address blocks: 50.7.92.0/22 maxlen: 22
198.16.64.0/23 maxlen: 23
198.16.92.0/23 maxlen: 23
2001:49f0:d024::/48 maxlen: 48
2001:49f0:d028::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b5:c8:99:79:69:5b:a3:19:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=13450a40-a09d-4a33-adb8-9a98cf022c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:1f:89:83:6a:4a:4e:26:2f:12:3f:11:41:
aa:51:49:cc:df:a4:7a:1b:ac:1d:42:e7:1c:14:1c:
05:d2:16:00:12:0e:60:c0:18:4b:bf:f0:08:ac:38:
ba:48:de:e4:f4:a6:9d:f7:89:0a:87:84:86:b2:18:
1f:46:25:3b:52:eb:c6:a2:5e:82:67:02:aa:e5:f9:
1a:7f:7c:28:6a:1a:53:87:c8:12:d5:ec:5a:04:b6:
c9:8b:5b:a0:86:8d:79:3d:51:1c:3f:74:8f:47:1c:
ed:e3:41:08:ee:64:78:c6:1d:e4:a0:19:d5:b0:c9:
05:e9:7b:8d:f4:a0:e0:f0:c0:ae:25:fe:b8:27:e7:
88:4d:87:11:af:ee:7f:36:b2:73:68:34:24:08:2b:
cb:e1:bb:f3:fa:77:c6:c9:1a:92:f3:40:ef:e2:da:
16:76:6e:8c:8e:c1:53:50:05:ba:1e:15:52:f4:d3:
17:3b:35:6f:00:8e:09:13:23:f6:23:8d:4b:35:2c:
05:0a:1a:5e:29:34:2f:41:fd:13:13:8e:ab:a7:7c:
cb:1c:a1:30:a2:f8:ee:03:c0:97:69:75:d5:8e:58:
cb:6e:48:66:bd:f8:0c:14:54:2f:10:0e:ab:2a:96:
3a:39:6f:07:e9:8f:6d:dd:09:00:be:05:22:87:b0:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:E5:A3:D2:F3:F1:B4:E8:E7:9C:1E:F2:67:07:F0:1C:85:1B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
50.7.92.0/22
198.16.64.0/23
198.16.92.0/23
IPv6:
2001:49f0:d024::/48
2001:49f0:d028::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:49:46:bc:a2:da:33:04:b2:d3:90:31:00:58:68:86:0e:3d:
20:42:ae:ac:6e:b2:3d:dc:fb:98:70:a5:2c:3e:e1:e4:03:68:
cf:4b:03:2b:61:31:b3:51:97:46:91:46:a2:ec:93:27:a4:fc:
79:09:79:81:ac:49:c5:b0:ce:eb:9f:5d:b2:02:0a:6e:24:46:
76:a3:6e:21:7c:ce:5a:ce:ab:ac:f0:3c:12:86:56:49:97:e6:
cb:79:5c:8b:9a:ca:5d:de:2c:3d:e4:93:c2:c2:fe:fd:97:b5:
88:44:35:e2:41:5d:88:17:e5:4c:35:a7:00:d3:13:5e:01:8d:
1a:16:8a:69:dc:a8:4d:27:4c:f5:36:82:db:bb:5f:ff:a4:42:
cb:33:06:03:90:be:17:92:f2:83:93:f9:5b:b1:8c:46:0e:b8:
c1:59:d0:b1:0c:b7:0e:88:d3:99:60:ef:42:7d:55:af:e7:bc:
11:df:b6:64:92:97:6d:89:75:ba:cc:3d:e6:72:8b:1e:c1:e0:
c4:2e:86:b7:62:38:00:e6:98:36:d6:92:d1:1e:54:cb:88:78:
77:88:71:bd:45:2f:db:4a:76:80:2d:6c:42:56:5a:cb:1a:0a:
9f:fa:eb:08:4d:62:f7:d2:f6:f7:cc:df:d7:24:e6:b3:58:2c:
cc:41:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:26 2025 by rpki-client