Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d937d59-6b32-3920-a078-b81d9795310d.roa
File: 1d937d59-6b32-3920-a078-b81d9795310d.roa (raw, json)
Hash identifier: Ib4g0Gqw3T5vkHngVzcg1USUn/LwSOAgmY9wB9xL0OY=
Subject key identifier: 9F:F0:54:C0:DB:71:FB:8C:8C:EE:61:F8:D4:1B:D5:CE:21:F3:76:B5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA14A34BE456A463DFF73F380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d937d59-6b32-3920-a078-b81d9795310d.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:4a:34:be:45:6a:46:3d:ff:73:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=0d058951-c18a-4ec9-acbc-8237113bf6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:24:c2:03:6e:a1:46:92:96:34:67:14:ae:
39:da:39:e0:89:33:02:5d:ba:2d:7c:c5:66:59:30:
df:7b:6e:5d:17:40:e7:06:33:79:c0:d7:0f:1c:93:
35:02:c4:3b:4a:75:03:af:f5:99:e0:f1:cd:7b:48:
9e:4d:c0:57:3e:71:d2:13:29:36:2d:d2:d8:b2:48:
e2:68:0c:67:36:2f:10:44:bf:d8:13:4b:14:d7:0e:
df:7a:e9:df:bc:34:73:54:9d:78:96:e4:4a:6c:f2:
5b:36:09:19:f0:58:4b:88:03:16:98:7f:9f:e6:8c:
15:61:3c:3c:1e:5f:5e:18:7e:44:82:63:3c:25:01:
1b:bd:0d:e0:bb:98:e6:be:86:57:97:5a:2e:08:d1:
ac:e4:d9:f5:79:37:5d:72:1e:38:ad:ab:39:dc:5f:
22:b1:ff:cc:78:a4:3e:c6:66:70:91:7e:a0:f3:fa:
bd:95:ab:f2:f5:74:90:25:aa:25:33:54:8f:da:15:
b8:4f:55:30:3a:69:ca:1b:bd:12:23:b8:8a:fe:8e:
e8:35:25:be:8f:2f:4a:1d:f2:5b:b9:3c:62:09:60:
56:97:c7:53:23:a2:2a:b7:49:43:31:f8:26:cd:0a:
c7:24:ac:4b:29:22:8a:92:db:77:9c:68:7c:67:4d:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:54:C0:DB:71:FB:8C:8C:EE:61:F8:D4:1B:D5:CE:21:F3:76:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d937d59-6b32-3920-a078-b81d9795310d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:600::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:73:77:52:d6:b0:ac:98:8a:22:0c:15:4f:54:70:fb:41:23:
51:91:ff:af:74:97:92:74:76:4c:bb:9c:dc:7d:aa:24:a1:ab:
9d:70:e2:48:01:36:9f:ab:be:1a:93:49:85:1a:04:9c:cc:30:
18:b0:2d:5e:b9:11:05:26:d6:3e:bf:f5:0f:94:d5:92:c7:e9:
f0:69:5e:43:87:76:aa:62:a5:28:c1:2d:6e:c0:57:2e:4c:52:
6b:83:08:5d:bf:bf:45:53:db:5d:4e:fd:bb:01:87:20:74:20:
93:7e:e4:48:dc:5a:1e:b5:59:0d:32:a8:24:cf:a5:ba:c4:55:
5d:67:9e:20:42:f5:ac:a1:78:35:0b:89:8d:cd:90:dd:22:ea:
17:c6:48:67:68:e3:69:84:bc:56:5b:f7:ae:8a:d7:d2:87:97:
d5:17:6a:d1:15:1e:f7:00:7b:4f:e3:30:27:b1:77:49:57:57:
55:10:b4:71:62:a5:9c:56:8b:58:66:c5:8e:dc:06:aa:e6:ad:
d2:db:af:55:9a:9d:44:11:be:09:23:0f:f6:ee:7f:33:17:da:
09:b0:06:e5:17:53:41:de:3a:98:10:fe:f0:da:54:3d:8d:20:
6b:3f:5a:08:7b:47:5e:29:cb:40:93:7b:c7:db:03:27:ac:97:
5f:fe:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:38 2025 by rpki-client