Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28fc1f91-c807-36cd-a8b9-8b98389b72a1.roa
File: 28fc1f91-c807-36cd-a8b9-8b98389b72a1.roa (raw, json)
Hash identifier: o84o/S2kg5xD4bSDuCRAkhfPReKh67DqydX7LzeJFBw=
Subject key identifier: D5:E2:9E:FE:25:C6:90:1D:7F:B3:BF:C2:03:1C:C1:0A:6E:D2:A2:C2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F3B647686F2848D9148B000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28fc1f91-c807-36cd-a8b9-8b98389b72a1.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 66.149.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:3b:64:76:86:f2:84:8d:91:48:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=8063ca65-611d-4329-87ed-094b329ab0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:4a:7c:70:62:0d:37:c7:4b:56:1b:97:83:
e2:d2:3d:6f:23:66:a9:17:73:c8:55:cb:55:bb:51:
70:ca:f7:c3:7d:05:8d:38:3e:1e:2e:77:b4:54:02:
04:b9:f8:62:0a:f9:6d:d9:0a:f2:7f:75:fe:a9:73:
1e:79:b4:0d:48:63:70:40:25:2a:96:3e:d3:d4:36:
b6:d9:cf:a4:f9:6a:b8:b3:29:55:23:68:cf:fd:ab:
3b:13:fe:99:c9:54:69:32:af:e0:c5:3c:4a:07:a8:
c9:5a:2e:64:a1:a7:34:14:2a:47:7c:40:8e:77:21:
53:b6:b3:ed:86:4c:36:9f:85:80:98:bf:3d:fe:66:
39:6e:ea:2c:8b:3c:8c:0d:0a:58:17:a7:e5:13:0a:
27:ba:87:a0:a7:6a:1c:53:5b:49:7e:62:a2:6e:55:
6f:ca:da:81:d2:12:98:ad:f6:d4:10:43:d4:f4:20:
82:2f:29:1b:e4:4d:e8:d3:79:cb:0a:e5:4c:ef:70:
2c:be:ce:52:12:2b:33:1a:ad:01:c0:5e:ac:be:ab:
db:2c:49:0a:77:8a:64:01:64:9e:86:f6:7b:f7:1d:
60:8d:84:f1:89:ca:26:48:6a:2f:2f:f3:76:c8:7d:
66:76:38:d6:46:cd:9f:de:c8:8e:4d:0e:ac:0c:8c:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:9E:FE:25:C6:90:1D:7F:B3:BF:C2:03:1C:C1:0A:6E:D2:A2:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28fc1f91-c807-36cd-a8b9-8b98389b72a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:6b:a4:28:37:a5:71:69:54:70:e5:1d:a4:04:47:3b:33:46:
a1:75:8c:29:3e:8f:b2:8c:ce:d0:c2:90:35:97:09:88:a0:82:
aa:c3:3d:b7:1f:bf:83:ae:4c:ca:6b:21:c0:a9:8e:5b:0f:78:
b6:4b:97:0d:d4:d8:2e:32:47:c5:cc:f0:02:7c:85:aa:00:5d:
9f:73:2b:d5:a2:2a:a8:4a:31:e1:b5:6a:e7:0f:2e:bd:b0:43:
e7:07:1a:d8:a4:5e:4c:96:5f:79:c0:92:c9:71:6b:4c:5e:46:
50:c6:23:4f:a8:dd:e6:86:7a:d3:86:89:39:4c:1c:7c:14:a2:
69:50:87:91:d8:e8:80:04:3e:67:95:50:87:7f:44:7e:5c:4b:
e0:57:3f:3a:d4:c8:cb:e2:fc:d3:d0:ca:60:15:25:71:aa:3a:
ea:bd:b5:f3:e1:0b:fc:7c:cb:a1:63:9c:f8:6a:3d:fe:b9:c5:
a4:5d:e5:7d:2f:6e:0e:c9:fd:f0:3a:68:c9:41:fc:58:a4:d6:
0f:d5:22:c0:96:38:03:95:6b:c3:d5:29:80:51:df:58:7f:8a:
a1:bc:fb:ef:19:82:08:27:10:89:3e:05:66:1e:5d:24:d0:4c:
d7:fe:0d:db:ca:c4:65:af:72:c0:56:d9:f4:e6:81:79:b2:e6:
c1:7b:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:06 2025 by rpki-client