Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a6a539c-f495-332c-822b-34ee66371841.roa
File: 2a6a539c-f495-332c-822b-34ee66371841.roa (raw, json)
Hash identifier: C59Y843UIyj90VxzlNg0fwpGEpRa+SPpjbVOk7sBTJs=
Subject key identifier: 63:38:E8:AF:62:6E:CB:77:31:B9:08:7F:EC:86:04:E8:CE:81:A1:39
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149F55C2077BF70D5CD6480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a6a539c-f495-332c-822b-34ee66371841.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:2300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:f5:5c:20:77:bf:70:d5:cd:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=f82dcbf6-cc6b-46b1-9aaf-c0007850f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:72:13:ab:bc:80:66:fd:f4:70:da:52:b8:5e:
09:6c:12:d3:ef:b3:d3:3e:ac:4a:bb:e2:8d:68:aa:
cb:02:7b:00:9c:fe:92:bc:3a:46:e2:db:b3:16:d0:
e6:9d:80:de:77:37:61:59:5e:53:c5:f8:e7:4c:51:
d4:81:49:f1:d4:7c:b6:37:6e:7d:ca:a7:47:69:b2:
21:c7:55:74:7f:33:2b:a4:60:c1:08:70:04:a8:61:
31:a7:bc:da:93:db:65:66:c3:f2:8d:5a:1b:91:e8:
b7:5b:a7:69:83:8e:e5:d1:55:78:bf:0e:32:29:2a:
43:7f:7c:fe:86:ed:91:01:35:d8:36:14:0d:da:21:
00:e2:37:af:ee:f9:37:a9:92:eb:97:2a:91:8c:47:
bd:e9:2e:fc:61:c3:ae:90:17:90:1a:b1:4d:6d:82:
57:a7:15:1a:58:2b:fd:4e:a7:50:85:5b:9b:10:db:
bf:e7:47:b0:f3:c3:c3:7f:df:42:99:bc:9e:22:78:
bf:78:76:04:1f:d1:c0:b9:43:b0:08:8f:c8:82:b2:
47:0d:82:dd:22:61:10:25:33:81:b2:0a:51:d5:dc:
be:12:93:4d:0b:65:d5:c1:ed:4d:6d:0d:51:b7:af:
1e:d4:60:8d:72:10:c2:ed:3c:bc:2f:a5:4e:2b:18:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:E8:AF:62:6E:CB:77:31:B9:08:7F:EC:86:04:E8:CE:81:A1:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a6a539c-f495-332c-822b-34ee66371841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:2300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:a7:39:8c:ff:ea:8c:c5:90:c6:ac:38:e7:84:03:21:9a:b9:
b7:fa:c4:59:36:d1:4f:93:45:9c:ee:9b:53:b5:0c:2f:69:48:
86:85:72:8a:cb:63:a9:78:8a:17:e0:88:74:a5:69:b8:cc:28:
ef:db:20:e3:f4:a9:6b:ab:31:5f:73:d9:68:57:fe:59:b4:97:
3a:0c:f6:d4:7a:c6:7f:f1:40:db:cc:0b:20:f0:3b:30:89:da:
76:5d:ae:0f:39:02:de:ec:97:69:ac:54:2b:fb:34:f8:47:29:
57:1c:24:00:11:5c:5a:b7:fe:1e:4c:8c:8f:f0:05:a4:e9:5b:
82:ce:09:8c:5d:c8:59:8e:54:a2:2b:3f:ae:fc:32:85:3b:3a:
1e:3e:71:62:97:3d:b7:f1:31:8e:6c:fb:1a:31:42:76:84:84:
f3:aa:a6:a2:78:20:fe:a3:f1:a7:3b:a6:7e:d3:8a:e5:7a:85:
38:22:5b:35:eb:5f:58:89:62:2b:20:18:53:21:fe:8e:70:90:
eb:fc:88:e7:67:c0:21:34:be:ae:9b:a3:5d:df:9a:05:57:1e:
33:b5:32:df:e7:79:1d:c3:ad:54:ae:4c:29:16:a0:12:eb:81:
3e:f8:94:9a:9f:e8:0d:d4:ae:c0:f1:89:d2:33:09:a4:5b:5f:
5d:b9:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:55 2025 by rpki-client