Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ff0c172-ebce-36ce-86f5-536544b0a441.roa
File: 0ff0c172-ebce-36ce-86f5-536544b0a441.roa (raw, json)
Hash identifier: Yvw2zo056swOe3zBeKSs8N5wmrunVAkO3dcp7/cTdNo=
Subject key identifier: 78:3E:DD:37:56:36:19:73:C6:DA:C9:93:E9:D3:56:09:64:27:8E:AB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC5BB5ED972C233562C81A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ff0c172-ebce-36ce-86f5-536544b0a441.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 26914
IP address blocks: 66.32.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c5:bb:5e:d9:72:c2:33:56:2c:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=91e532a2-0d13-44ac-b89a-7cf8efafbfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:c6:f8:4a:b7:a2:a9:c1:51:40:dd:83:0d:
93:20:5a:ff:a9:f7:75:4d:8d:49:f3:88:9a:b5:6f:
fa:53:e8:f8:1a:cc:68:f1:95:ff:30:55:f7:5c:54:
0e:0f:ac:00:22:1b:ee:ad:5c:b1:8b:6a:58:d8:50:
b7:8e:e0:26:be:45:c0:73:c3:d9:be:87:73:5e:b1:
9d:6d:39:54:71:a3:07:f9:db:b5:0f:92:87:35:6a:
5a:79:9f:e8:96:94:92:1d:76:47:8f:4d:1d:db:9f:
e7:a5:1f:7f:c2:04:d4:36:80:c2:3d:43:b1:73:63:
7d:cc:cd:9c:72:36:b2:c6:d3:2e:b5:60:bc:0a:3f:
ce:72:93:aa:86:21:10:36:fe:87:75:de:e2:a7:e8:
0d:c7:61:7e:d6:53:a7:ad:42:06:d0:77:1e:93:91:
b1:99:3b:83:5f:8f:61:95:a5:37:a6:3b:e4:4d:e2:
40:a2:65:54:d8:9b:31:f9:a7:2c:72:f5:7f:6b:f4:
9c:8d:e7:3a:e6:96:e1:a7:68:59:7e:99:fa:56:24:
d6:68:58:b5:06:0f:f1:d4:97:39:1a:c5:b5:2b:1b:
07:bc:9b:8c:be:b5:8d:c6:f4:40:68:19:e9:36:d5:
00:df:b7:58:16:d4:21:5b:6f:c4:1d:f0:a9:9c:85:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:DD:37:56:36:19:73:C6:DA:C9:93:E9:D3:56:09:64:27:8E:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ff0c172-ebce-36ce-86f5-536544b0a441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:40:4d:bb:7b:4e:3d:1d:a2:13:a0:5b:47:bc:de:65:a2:c6:
60:74:8d:66:8d:a9:73:a1:8f:18:c3:ab:c0:09:c3:a4:c0:26:
4d:e6:72:17:b2:9b:03:61:e2:76:fe:c3:a9:12:3a:e5:9c:b2:
c3:26:97:a1:f0:65:3d:02:93:1b:6e:85:6a:0d:99:c2:49:54:
b5:42:23:fd:da:81:ec:d1:33:2e:ae:e3:c5:de:ee:20:f3:4e:
5a:55:1c:8a:40:f9:d2:ae:5e:33:62:ed:0d:0d:a1:68:d5:85:
b3:6a:5e:af:6d:8a:cc:c9:4f:f8:79:ba:fa:d5:8a:b1:1a:aa:
cb:45:cd:cb:0c:f2:9a:7b:44:48:f0:10:16:c9:b6:f2:cc:0a:
2d:15:8d:74:7c:08:d1:73:69:3a:53:bd:30:25:67:d8:2e:04:
ae:68:9a:d7:16:a0:3a:3a:11:9a:8d:13:ac:f5:b5:91:26:bd:
94:13:fd:71:7c:03:aa:2f:97:5f:8e:48:e9:44:b7:5d:f7:e4:
ff:19:8b:a7:04:3c:bd:ca:0f:93:bb:b8:3b:00:68:02:ff:e2:
ff:3c:f6:fc:02:72:c9:72:f3:a6:38:a5:e3:52:24:4f:00:f9:
37:3f:22:9d:71:f4:f2:56:42:5a:07:d4:ad:6f:af:7e:18:6e:
41:03:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:52 2025 by rpki-client