Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1950f55e-a767-3bee-a86c-2fad70aa1f95.roa
File: 1950f55e-a767-3bee-a86c-2fad70aa1f95.roa (raw, json)
Hash identifier: 4X2gOxtIxDzRIi8NhzZzu0rYnXXcmReaWJWWdLl7t7k=
Subject key identifier: BB:01:A9:F7:1A:62:58:74:6C:CD:BA:56:33:0A:F1:F3:5C:73:10:2B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551DD794B1FBCA4E87C26280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1950f55e-a767-3bee-a86c-2fad70aa1f95.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7252
IP address blocks: 199.195.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1d:d7:94:b1:fb:ca:4e:87:c2:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=3fa27963-1995-40e1-b10b-173ae5ce13bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:e7:49:2f:21:3d:6f:41:2c:9c:a3:d7:eb:
a6:45:9d:8b:ba:09:d0:74:55:26:91:1f:7c:92:c0:
98:c9:6e:10:9b:bc:c8:c4:4a:e1:12:11:66:46:8d:
37:ff:97:e3:66:85:d8:c9:bc:97:65:0e:9c:d6:da:
ad:5a:2a:bc:ad:a3:50:61:1f:47:2c:6c:89:f9:fd:
c7:15:49:75:32:32:09:bb:f7:50:6f:cb:cc:1d:c9:
97:70:22:23:cf:39:1f:3b:ac:86:30:0c:18:f7:a3:
f9:ad:3b:fc:f4:1b:9a:09:8b:88:07:af:c8:63:19:
12:a2:d8:04:a3:8d:dd:27:4f:3a:2d:b2:c9:76:8b:
6e:c7:f8:b3:7d:f3:77:2c:1d:2e:91:66:d2:e5:67:
ff:44:46:c6:1f:d6:2e:64:6d:ef:1c:04:92:fe:83:
e3:1d:7a:3a:54:11:6b:20:f6:64:f1:a9:79:18:23:
72:d2:fb:6e:52:97:d8:62:56:7b:44:44:57:96:a4:
52:8b:35:d8:78:b0:d0:ce:61:5a:70:30:6d:88:46:
7a:6b:bf:a1:0e:2d:14:5d:a2:63:6e:42:dd:e2:58:
29:f8:de:6d:1b:5c:5b:db:e1:87:ed:fb:b0:c8:b4:
99:77:3e:36:4a:1b:3f:b6:61:3b:ef:4f:5d:37:54:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:A9:F7:1A:62:58:74:6C:CD:BA:56:33:0A:F1:F3:5C:73:10:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1950f55e-a767-3bee-a86c-2fad70aa1f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.195.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:db:dd:92:6c:ec:88:7d:ce:99:50:47:f5:22:42:7d:a5:48:
70:da:5d:d6:35:f6:c2:b1:84:7a:5a:1e:fb:78:72:b8:d9:ac:
fe:3a:a7:5d:42:bf:b4:a6:d8:b6:d6:70:59:61:6c:1e:5d:17:
ad:1c:b2:67:32:c9:03:e4:eb:d8:e7:df:2f:c2:d8:a1:dd:53:
3b:1f:bc:1f:6e:bf:cd:2f:03:1c:f3:16:69:cd:d1:9e:31:2a:
16:3b:de:2b:9f:f4:14:80:4e:0c:1a:4c:e8:5c:d2:7a:b5:9b:
17:b6:97:b1:05:30:ce:58:51:43:a1:e3:8a:65:e2:a5:e7:d6:
e9:d3:42:1b:68:d4:c0:8e:ad:0d:b8:d7:93:f1:3c:03:a4:2f:
f4:52:92:ff:52:01:e2:e1:e9:1f:1d:03:a1:b1:c1:0c:ac:5a:
b9:d2:d3:99:bf:19:40:71:28:fb:aa:b0:f9:2c:3d:61:ce:10:
b1:69:c8:41:b0:7d:42:57:ce:47:25:72:29:21:21:30:75:ef:
e5:82:1a:79:31:00:73:fb:be:f5:24:23:9c:30:c9:65:9c:d0:
2c:3b:0f:97:12:fc:06:8c:91:c0:17:9a:a4:bc:a4:6c:90:be:
54:af:b6:5b:7d:b6:2d:c0:c7:83:2e:dd:9b:cf:2d:da:0d:4f:
a8:99:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:53 2025 by rpki-client